CVE-2012-4752
Last modified
CVE-2012-4752 is a vulnerability of currently unknown severity. appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393.. EPSS estimates a 2.18% chance of exploitation in the next 30 days.
Description
appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Owncloud | Owncloud | <= 4.0.5 |
| Owncloud | Owncloud Server | 3.0.0 |
| Owncloud | Owncloud Server | 3.0.1 |
| Owncloud | Owncloud Server | 3.0.2 |
| Owncloud | Owncloud Server | 3.0.3 |
| Owncloud | Owncloud Server | 4.0.0 |
| Owncloud | Owncloud Server | 4.0.1 |
| Owncloud | Owncloud Server | 4.0.2 |
| Owncloud | Owncloud Server | 4.0.3 |
| Owncloud | Owncloud Server | 4.0.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-4752?
How severe is CVE-2012-4752?
How do I fix CVE-2012-4752?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-4744Cross-site scripting (XSS) vulnerability in ssearch.php in t…
- CVE-2012-4745Cross-site scripting (XSS) vulnerability in admin/login.asp …
- CVE-2012-4746Cross-site request forgery (CSRF) vulnerability in accessacc…
- CVE-2012-4747Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before …
- CVE-2012-4750A Code Execution vulnerability exists in the memcpy function…9.8
- CVE-2012-4751Cross-site scripting (XSS) vulnerability in Open Ticket Requ…
- CVE-2012-4753Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2012-4754Multiple untrusted search path vulnerabilities in MindManage…
- CVE-2012-4755Untrusted search path vulnerability in SciTools Understand b…
- CVE-2012-4756Multiple untrusted search path vulnerabilities in CyberLink …
- CVE-2012-4757Multiple untrusted search path vulnerabilities in CyberLink …
- CVE-2012-4758Multiple untrusted search path vulnerabilities in CyberLink …
Are you affected by CVE-2012-4752?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST