ownCloud · Report #107849

[https://test1.owncloud.com/owncloud6/] Guessable password used for admin user

Validstatus

2 Jan 2016disclosed

How it was found

On https://test1.owncloud.com/owncloud6/ there is easy to guess password set for admin user. Login with:

admin/admin

Other instances of owncloud i was able to find on that server have different password set for admin.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original