CVE-2016-9462: CVE-2016-9462

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-9462

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file. The restore capability of Nextcloud/ownCloud was not verifying whether a user has only read-only access to a share. Thus a user with read-only access was able to restore old versions.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

Permission Issues

Source: NVD (National Vulnerability Database)

Vulnerability Title

ownCloud Server和Nextcloud Server 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

ownCloud是德国ownCloud公司的一套免费且开源的个人云存储解决方案。Nextcloud是一套开源的自托管文件同步和共享的通信应用平台。ownCloud Server和Nextcloud Server都是其中的一个服务器版。 Nextcloud Server 9.0.52之前的版本和ownCloud Server 9.0.4之前的版本中存在安全漏洞，该漏洞源于程序没有正确的验证恢复权限。攻击者可利用该漏洞恢复成旧版本。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4	Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4	-

II. Public POCs for CVE-2016-9462

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2016-9462

Please Login to view more intelligence information

https://hackerone.com/reports/146067x_refsource_MISC
https://github.com/owncloud/core/commit/d31720b6f1e8c8dfeb5e8805ab35ad7c8000b2f1x_refsource_MISC
https://owncloud.org/security/advisory/?id=oc-sa-2016-015x_refsource_MISC
https://github.com/owncloud/core/commit/c93eca49c32428ece03dd67042772d5fa62c8d6ex_refsource_MISC
https://github.com/owncloud/core/commit/23383080731d092e079986464a8c4c9ffcb79f4cx_refsource_MISC
https://nextcloud.com/security/advisory/?id=nc-sa-2016-005x_refsource_MISC
https://github.com/nextcloud/server/commit/1208953ba1d4d55a18a639846bbcdd66a2d5bc5ex_refsource_MISC
https://github.com/owncloud/core/commit/3b056fa68ce502ceb0db9b446dab3b9e7b10dd13x_refsource_MISC
http://www.securityfocus.com/bid/97285vdb-entryx_refsource_BID
https://nvd.nist.gov/vuln/detail/CVE-2016-9462

IV. Related Vulnerabilities

Same product: Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4

Same vendor: n/a

Same weakness: CWE-275

V. Comments for CVE-2016-9462

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2016-9462

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2016-9462

III. Intelligence Information for CVE-2016-9462

IV. Related Vulnerabilities

V. Comments for CVE-2016-9462

Leave a comment