Non notée
CVE-2020-8150 A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the…
Description
A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Nextcloud Server | 19.0.2 | Pas de correctif indiqué |
Références
- hackerone.com hackerone.com
- nextcloud.com nextcloud.com
- 20201225 Re: [FD] CVE-2020-8150 - Remote Code Execution as SYSTEM/root via Backblaze seclists.org
- 20201229 Re: [FD] CVE-2020-8150 - Remote Code Execution as SYSTEM/root via Backblaze seclists.org
- 20201229 Re: CVE-2020-8150 - Remote Code Execution as SYSTEM/root via Backblaze seclists.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Nextcloud Server
Les 40 CVE de Nextcloud Server →
CVE-2021-22915
Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6…
Non notée
CVE-2020-8296
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured
Non notée
CVE-2021-22878
Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in…
Non notée
CVE-2021-22877
A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users…
Non notée