CVE-2020-8259

Summary

Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the encryption keys.

Affected Software

Weaknesses

• CWE-522: Insufficiently Protected Credentials (CWE-522)

ADP Enrichment

CVE Program Container

Additional References

• https://hackerone.com/reports/732431
• https://nextcloud.com/security/advisory/?id=NC-SA-2020-041

References

• https://hackerone.com/reports/732431
• https://nextcloud.com/security/advisory/?id=NC-SA-2020-041

• ←Previous
• Next→