MEDIUM
A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files
Published Nov 9, 2020
4.1
MEDIUMCVSS 3.1
EPSS 0.29%
Description
A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files.
Affected products
- Vendor n/a Product Nextcloud Server Defaultn/a
- Version 19.0.2StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Nextcloud Server | n/a |
|
- < 19.0.2
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (6)
- http://seclists.org/fulldisclosure/2020/Dec/55 mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2020/Dec/57 mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2020/Dec/58 mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29044 Advisory
- https://hackerone.com/reports/742588 x_refsource_MISCExploitThird Party Advisory
- https://nextcloud.com/security/advisory/?id=NC-SA-2020-039 x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://seclists.org/fulldisclosure/2020/Dec/55 | mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory | |
| http://seclists.org/fulldisclosure/2020/Dec/57 | mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory | |
| http://seclists.org/fulldisclosure/2020/Dec/58 | mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29044 | Advisory | |
| https://hackerone.com/reports/742588 | x_refsource_MISCExploitThird Party Advisory | |
| https://nextcloud.com/security/advisory/?id=NC-SA-2020-039 | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner hackerone
Published Nov 9, 2020
Updated Aug 4, 2024
Reserved Jan 28, 2020
Link CVE-2020-8150
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2020-29044 Assigner hackerone
Published Nov 9, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-29044