CVE-2012-5607

CVE-2012-5607 describes a vulnerability in ownCloud before versions 4.0.9 and 4.5.0, where the "Lost Password" reset function inadequately validates security tokens. This flaw allows remote attackers to change user account passwords through unspecified vectors related to a remote timing attack. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having a low attack complexity, potentially leading to unauthorized password changes. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.