← All advisories

Critical severity9.8NVD Advisory· Published Mar 26, 2018· Updated Jun 17, 2026

CVE-2014-2048

CVE-2014-2048

Description

The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation.

Affected products

3

OwnCloud/Owncloudinferred3 versions
<5.0.15+ 2 more
- (no CPE)range: <5.0.15
- cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*range: <5.0.15
- (no CPE)range: <5.0.15

Patches

Vulnerability mechanics

References

2

exchange.xforce.ibmcloud.com/vulnerabilities/91973nvdThird Party AdvisoryVDB Entry
owncloud.org/security/advisories/insecure-openid-implementation/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.