CVE-2013-1941

no score yetEPSS 1.1%

The installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5.0.4 uses the time function to seed the generation of the PostgreSQL database user password, which makes it easier for remote attackers to guess the password via a brute force attack.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2014-06-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

owncloud:owncloud
owncloud:owncloud_server

References

http://owncloud.org/about/security/advisories/oC-SA-2013-015/
http://owncloud.org/about/security/advisories/oC-SA-2013-015/

Check your stack JSON