CVE-2020-8150

Опубликовано: 09 нояб. 2020

Источник: nvd

CVSS3: 4.1

CVSS2: 1.9

EPSS Низкий

Описание

A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files.

Ссылки

http://seclists.org/fulldisclosure/2020/Dec/55
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Dec/57
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Dec/58
Mailing List
Third Party Advisory
https://hackerone.com/reports/742588
Exploit
Third Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2020-039
Vendor Advisory
http://seclists.org/fulldisclosure/2020/Dec/55
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Dec/57
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Dec/58
Mailing List
Third Party Advisory
https://hackerone.com/reports/742588
Exploit
Third Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2020-039
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*

Версия до 19.0.2 (исключая)

EPSS

Процентиль: 22%

0.00289

Низкий

4.1 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-310

CWE-311

Связанные уязвимости

CVE-2020-8150

CVSS3: 4.1

debian

почти 6 лет назад

A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker t ...

GHSA-2q3r-568x-rqmv

CVSS3: 4.1

github

больше 4 лет назад

A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files.

ALT-PU-2020-3060

CVSS3: 8.1

altlinux

около 6 лет назад

ALT-PU-2020-3060: package `nextcloud` update to version 20.0.0-alt1

EPSS

Процентиль: 22%

0.00289

Низкий

4.1 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-310

CWE-311