PT-2021-12725
CVE-2020-8296
·
Published
2020-10-15
·
Updated
2022-01-01
Description by
CVSS 3.1
6.7
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Nextcloud Server versions prior to 20.0.0
Description:
The issue concerns the storage of passwords in a recoverable format, even when external storage is not configured. This affects Nextcloud Server versions prior to 20.0.0.
Recommendations:
For Nextcloud Server versions prior to 20.0.0, update to version 20.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data stored on the server until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾