CVE-2018-16464

Опубликовано: 30 окт. 2018

Источник: nvd

CVSS3: 5.7

CVSS2: 3.5

EPSS Низкий

Описание

A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password.

Ссылки

https://hackerone.com/reports/146133
Third Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2018-012
Vendor Advisory
https://hackerone.com/reports/146133
Third Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2018-012
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*

Версия до 14.0.0 (исключая)

EPSS

Процентиль: 45%

0.00222

Низкий

5.7 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2018-16464

CVSS3: 5.7

debian

больше 6 лет назад

A missing access check in Nextcloud Server prior to 14.0.0 could lead ...

GHSA-j92w-qfjr-c5j9

CVSS3: 5.7

github

около 3 лет назад

A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password.

EPSS

Процентиль: 45%

0.00222

Низкий

5.7 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-287