CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.1. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2016-1500
Severity
LOW
CVSS
3.1
EPSS
0.85%
Original NVD Description
ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "file_versions" application is enabled, does not properly check the return value of getOwner, which allows remote authenticated users to read the files with names starting with ".v" and belonging to a sharing user by leveraging an incoming share.