PT-2020-20008 · Nextcloud+2 · Nextcloud Server+2
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Nextcloud Server version 19.0.0
Description
A logic error caused the plaintext storage of the share password when it was given on the initial create API call.
Recommendations
For Nextcloud Server version 19.0.0, update to a version that fixes the logic error to prevent plaintext storage of share passwords.
Exploit
Fix
Insufficiently Protected Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Nextcloud Server
Suse