PT-2020-9734
CVE-2019-15611
·
تاريخ النشر
2020-02-04
·
تاريخ التحديث
2020-02-11
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Nextcloud iOS App version 2.23.0
Description
The issue is related to a violation of secure design principles, causing the app to leak its login and token to other Nextcloud services. This occurs during specific actions such as searching for federated users or registering for push notifications.
Recommendations
For Nextcloud iOS App version 2.23.0, update to a newer version that addresses the secure design principles violation to prevent login and token leakage.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾