CVE-2018-16467

Опубликовано: 30 окт. 2018

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

A missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the previews of single file password protected shares.

Ссылки

https://hackerone.com/reports/231917
Exploit
Third Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2018-014
Vendor Advisory
https://hackerone.com/reports/231917
Exploit
Third Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2018-014
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*

Версия до 14.0.0 (исключая)

EPSS

Процентиль: 65%

0.01068

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

CWE-287

Связанные уязвимости

CVE-2018-16467

CVSS3: 5.3

debian

около 8 лет назад

A missing check in Nextcloud Server prior to 14.0.0 could give unautho ...

GHSA-wjx4-rv24-8pr4

CVSS3: 5.3

github

больше 4 лет назад

A missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the previews of single file password protected shares.

ALT-PU-2019-1414

CVSS3: 8.1

altlinux

больше 7 лет назад

ALT-PU-2019-1414: package `nextcloud` update to version 15.0.5-alt1

EPSS

Процентиль: 65%

0.01068

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

CWE-287