PT-2020-19969
CVE-2020-8133
·
Published
2020-11-09
·
Updated
2020-11-19
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Nextcloud Server version 19.0.1
Description
A wrong generation of the passphrase for the encrypted block allowed an attacker to overwrite blocks in a file.
Recommendations
For Nextcloud Server version 19.0.1, update to a version that fixes the issue with the passphrase generation for encrypted blocks.
Found an issue in the description? Have something to add? Feel free to write us 👾