CVE-2019-15617

Summary

A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login.

Affected Software

VendorProductVersion RangeStatus
n/aNextcloud Server17.0.1affected

Weaknesses

  • CWE-287: Improper Authentication - Generic (CWE-287)

ADP Enrichment

CVE Program Container

Additional References

References