VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jan 8, 2016· Updated Jun 17, 2026

CVE-2016-1501

CVE-2016-1501

Description

ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain sensitive information via unspecified vectors, which reveals the installation path in the resulting exception messages.

Affected products

5
  • OwnCloud/Owncloud
    cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*
    Range: <=8.0.8
  • OwnCloud/Server4 versions
    cpe:2.3:a:owncloud:owncloud_server:8.1.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:owncloud:owncloud_server:8.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:8.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:owncloud:owncloud_server:8.1.3:*:*:*:*:*:*:*
    • (no CPE)range: before 8.0.9 and 8.1.x before 8.1.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.