CVE-2015-5955
ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which...
ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.
Exploit likelihood
What each source reports
NVD Score used
ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.
- Record
CVE-2015-5955- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
CVE List No score
ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.
- Record
CVE-2015-5955- Updated
- 2026-11-02
EUVDEUVD-2015-5901 No score
ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.
- Record
EUVD-2015-5901- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6hf2-2p4r-38v2 No score
ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which...
ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers.
- Record
GHSA-6hf2-2p4r-38v2- Weakness
- CWE-522
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-5955 is a medium vulnerability (CVSS 5.0) in Owncloud Client, published October 29, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. No source names a fixed version.