PT-2020-9734

CVE-2019-15611

·

Published

2020-02-04

·

Updated

2020-02-11

Description by

CVSS 3.1
4.9
Medium
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Nextcloud iOS App version 2.23.0
Description The issue is related to a violation of secure design principles, causing the app to leak its login and token to other Nextcloud services. This occurs during specific actions such as searching for federated users or registering for push notifications.
Recommendations For Nextcloud iOS App version 2.23.0, update to a newer version that addresses the secure design principles violation to prevent login and token leakage.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-657: Violation of Secure Design Principles
Related identifiers
CVE-2019-15611
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com