CVE-2021-35948

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can…

published September 7, 2021

CVSS
—
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00693 · 52.4th percentile
Published
2021-09-07T19:08Z
EPSS history
Timeline
  • 07 SEP 19:08Z
    Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can…
    cvelistv5