Vulnerabilities > CVE-2020-36250 - Unspecified vulnerability in Owncloud

CVSS 4.6 - MEDIUM

Attack vector

PHYSICAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

low complexity

owncloud

NVD

Published: 2021-02-19

Updated: 2021-07-21

Summary

In the ownCloud application before 2.15 for Android, the lock protection mechanism can be bypassed by moving the system date/time into the past.

Vulnerable Configurations

Part	Description	Count
Application	Owncloud Owncloud Owncloud 1.3.12 Owncloud Owncloud 1.3.13 Owncloud Owncloud 1.3.14 Owncloud Owncloud 1.3.17 Owncloud Owncloud 1.3.18 Owncloud Owncloud 1.3.19 Owncloud Owncloud 1.3.20 Owncloud Owncloud 1.3.21 Owncloud Owncloud 1.3.22 Owncloud Owncloud 1.4.0 Owncloud Owncloud 1.4.1 Owncloud Owncloud 1.4.3 Owncloud Owncloud 1.4.4 Owncloud Owncloud 1.4.5 Owncloud Owncloud 1.4.6 Owncloud Owncloud 1.5.0 Owncloud Owncloud 1.5.1 Owncloud Owncloud 1.5.2 Owncloud Owncloud 1.5.3 Owncloud Owncloud 1.5.4 Owncloud Owncloud 1.5.5 Owncloud Owncloud 1.5.6 Owncloud Owncloud 1.5.7 Owncloud Owncloud 1.5.8 Owncloud Owncloud 1.6.0 Owncloud Owncloud 1.6.1 Owncloud Owncloud 1.6.2 Owncloud Owncloud 1.7.0 Owncloud Owncloud 1.7.2 Owncloud Owncloud 1.8 Owncloud Owncloud 1.9 Owncloud Owncloud 1.9.1 Owncloud Owncloud 2.0.0 Owncloud Owncloud 2.0.1 Owncloud Owncloud 2.0.1.1 Owncloud Owncloud 2.1.0 Owncloud Owncloud 2.1.1 Owncloud Owncloud 2.1.2 Owncloud Owncloud 2.2.0 Owncloud Owncloud 2.3.0 Owncloud Owncloud 2.4.0 Owncloud Owncloud 2.5.0 Owncloud Owncloud 2.5.1 Owncloud Owncloud 2.6.0 Owncloud Owncloud 2.7.0 Owncloud Owncloud 2.8.0 Owncloud Owncloud 2.9.0 Owncloud Owncloud 2.9.1 Owncloud Owncloud 2.9.2 Owncloud Owncloud 2.9.3 Owncloud Owncloud 2.10.0 Owncloud Owncloud 2.10.1 Owncloud Owncloud 2.11.0 Owncloud Owncloud 2.11.1 Owncloud Owncloud 2.12 Owncloud Owncloud 2.13 Owncloud Owncloud 2.13.1 Owncloud Owncloud 2.14 Owncloud Owncloud 2.14.1 Owncloud Owncloud 2.14.2	69

References

https://owncloud.com/security-advisories/security-lock-can-be-bypassed-by-changing-the-system-date/