CVE-2021-32801

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 20.0.12 Nextcloud Server versions prior to 21.0.4 Nextcloud Server versions prior to 22.1.0

Description The Nextcloud server, an open-source, self-hosted personal cloud, has a issue where logging of exceptions may have resulted in logging potentially sensitive key material for the Nextcloud Encryption-at-Rest functionality.

Recommendations For Nextcloud Server versions prior to 20.0.12, upgrade to 20.0.12 to resolve the issue. For Nextcloud Server versions prior to 21.0.4, upgrade to 21.0.4 to resolve the issue. For Nextcloud Server versions prior to 22.1.0, upgrade to 22.1.0 to resolve the issue. If upgrading is not an option, disable system logging to resolve this issue until an upgrade can be performed.