CVE-2012-5607 | BDVDB-2026-53836 Detail

Description#

The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, which allows remote attackers to change an accounts password via unspecified vectors related to a "Remote Timing Attack."

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12012-12-18Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.