CVE-2022-36074 - Authentication headers exposed on by Nextcloud Server

Back Back to CVE browser

HIGH

Authentication headers exposed on by Nextcloud Server

Published Sep 15, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.76%

Description

Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade. This can lead to account access exposure and compromise. It is recommended that the Nextcloud Server is upgraded to 23.0.7 or 24.0.3. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.11, 23.0.7 or 24.0.3. There are no known workarounds for this issue.

Affected products

Vendor Nextcloud Product Security-Advisories Default
n/a
- Version
  < 23.0.7
  Status
  affected
  Constraints
  -
- Version
  >= 24.0.0, < 24.0.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Nextcloud

Security-Advisories

n/a

Version	Status	Constraints
< 23.0.7	affected	-
>= 24.0.0, < 24.0.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-863

Incorrect Authorization

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38832
Advisory
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vqgm-f748-g76v
x_refsource_CONFIRMThird Party Advisory
https://github.com/nextcloud/server/pull/32941
x_refsource_MISCPatchThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38832		Advisory
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vqgm-f748-g76v		x_refsource_CONFIRMThird Party Advisory
https://github.com/nextcloud/server/pull/32941		x_refsource_MISCPatchThird Party Advisory