Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which makes it easier for remote attackers to conduct man-in-the-middle (MITM) attacks by leveraging a server using a self-signed certificate. NOTE: this vulnerability exists because of a partial CVE-2015-4456 regression.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OwnCloud Desktop Client 安全漏洞
Vulnerability Description
ownCloud是德国OwnCloud公司的一套免费且开源的个人云存储解决方案，它提供文件管理、音乐存储、日历等功能。ownCloud Desktop Client是一个用于连接ownCloud服务器的桌面客户端。 OwnCloud Desktop Client 2.0.1之前版本中存在安全漏洞，该漏洞源于程序调用不正确的‘QNetworkReply::ignoreSslErrors’函数时，客户端使用的Qt 5.3.x之前版本编译器的twork栈会忽略所有错误。远程攻击者可借助使用self-signed
CVSS Information
N/A
Vulnerability Type
N/A