Описание
Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| nextcloud-server | itp | package |
EPSS
Процентиль: 26%
0.00323
Низкий
Связанные уязвимости
CVSS3: 4.4
nvd
почти 6 лет назад
Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on.
CVSS3: 4.4
github
больше 4 лет назад
Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on.
CVSS3: 8.1
altlinux
около 6 лет назад
ALT-PU-2020-3060: package `nextcloud` update to version 20.0.0-alt1
EPSS
Процентиль: 26%
0.00323
Низкий