Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-70099
HistoryApr 29, 2022 - 12:00 a.m.

Nextcloud Android app access control error vulnerability

2022-04-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
nextcloud
android
access control
vulnerability
germany
mobile application
improper access control
authenticated attacker
bypass
locking
device

EPSS

0.001

Percentile

34.5%

Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. nextcloud Android app versions prior to 3.19.1 contain an access control error vulnerability that stems from improper access control, which is exploited by An authenticated attacker could exploit the vulnerability to bypass the locking of the Nextcloud app on an Android device by repeatedly reopening the app.

EPSS

0.001

Percentile

34.5%