CVE-2012-4392

CVE-2012-4392 describes an authentication bypass vulnerability in ownCloud Server version 4.0.7, specifically within its index.php component. An attacker can exploit this by crafting a malicious oc_token cookie, allowing unauthorized access. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage.