CVE-2014-2047
Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vectors.
Ver en NVDSeveridad
N/A
EPSS
Probabilidad de explotación (próx. 30 días): 0.0037 (0.4%)
Percentil: 58.4%
EPSS: 2026-05-06
Afecta
owncloud:owncloudowncloud:owncloud_serverDescripción técnica
Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vectors.
Publicada: 14/3/2014, 16:55:05
Última modificación: 6/5/2026, 22:30:45