Unrated severityNVD Advisory· Published Jan 3, 2013· Updated Jun 16, 2026
CVE-2012-5665
CVE-2012-5665
Description
ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit app configurations of user_webdavauth and user_ldap by editing this file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16cpe:2.3:a:owncloud:owncloud_server:4.0.0:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:owncloud:owncloud_server:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:owncloud:owncloud_server:4.5.4:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- github.com/owncloud/core/commit/db7ca53nvdPatch
- github.com/owncloud/core/commit/c4ecbadnvdExploitPatch
- secunia.com/advisories/51614nvdVendor Advisory
- owncloud.org/changelog/nvd
- www.openwall.com/lists/oss-security/2012/12/22/2nvd
- www.openwall.com/lists/oss-security/2012/12/22/5nvd
- www.securityfocus.com/bid/57030nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/80808nvd
News mentions
0No linked articles in our index yet.