CVE-2017-5865

The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on whether the username is valid, which allows remote attackers to enumerate user names via a large number of password reset attempts.

• CWE-200

• http://www.securityfocus.com/bid/96425Third Party Advisory, VDB Entry
• https://owncloud.org/security/advisory/?id=oc-sa-2017-001Patch, Vendor Advisory
• http://www.securityfocus.com/bid/96425Third Party Advisory, VDB Entry
• https://owncloud.org/security/advisory/?id=oc-sa-2017-001Patch, Vendor Advisory

Published

Mar 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5857Memory leak in the virgl_cmd_resource_unref function in hw/d…6.5
• CVE-2017-5858An incorrect implementation of "XEP-0280: Message Carbons" i…
• CVE-2017-5859On Cambium Networks cnPilot R200/201 devices before 4.3, the…9.8
• CVE-2017-5861Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-5863Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected…
• CVE-2017-5864Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected…
• CVE-2017-5866The autocomplete feature in the E-Mail share dialog in ownCl…
• CVE-2017-5867ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x bef…
• CVE-2017-5868CRLF injection vulnerability in the web interface in OpenVPN…
• CVE-2017-5869Directory traversal vulnerability in the file import feature…
• CVE-2017-5870Multiple cross-site scripting (XSS) vulnerabilities in ViMbA…
• CVE-2017-5871Odoo Version <= 8.0-20160726 and Version 9 is affected by: C…