Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-9463
HistoryMar 28, 2017 - 2:59 a.m.

CVE-2016-9463

2017-03-2802:59:00
CWE-303
CWE-287
[email protected]
web.nvd.nist.gov
24
4
cve-2016-9463
nextcloud
owncloud
server security
smb
authentication bypass
vulnerability
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON

Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass. Nextcloud/ownCloud include an optional and not by default enabled SMB authentication component that allows authenticating users against an SMB server. This backend is implemented in a way that tries to connect to a SMB server and if that succeeded consider the user logged-in. The backend did not properly take into account SMB servers that have any kind of anonymous auth configured. This is the default on SMB servers nowadays and allows an unauthenticated attacker to gain access to an account without valid credentials. Note: The SMB backend is disabled by default and requires manual configuration in the Nextcloud/ownCloud config file. If you have not configured the SMB backend then you’re not affected by this vulnerability.

Affected configurations

NVD
Node
nextcloudnextcloud_serverRange<9.0.54
OR
nextcloudnextcloud_serverRange10.0.0–10.0.1
OR
owncloudowncloudRange8.2.0–8.2.9
OR
owncloudowncloudRange9.0.0–9.0.4
OR
owncloudowncloudRange9.1.0–9.1.2

CNA Affected

[
  {
    "product": "Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Nextcloud Server & ownCloud Server Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9"
      }
    ]
  }
]

Social References

More

Related

hackerone 1
ubuntucve 1
osv 1
cvelist 1
nextcloud 1
prion 1
nvd 1
openvas 2
hackerone
hackerone
ownCloud: SMB User Authentication Bypass and Persistence
2016-06-29 06:53:24
ubuntucve
ubuntucve
CVE-2016-9463
2017-03-28 00:00:00
osv
osv
CVE-2016-9463
2017-03-28 02:59:00
cvelist
cvelist
CVE-2016-9463
2017-03-28 02:46:00
nextcloud
nextcloud
SMB User Authentication Bypass (NC-SA-2016-006)
2016-10-10 00:00:00
prion
prion
Authentication flaw
2017-03-28 02:59:00
nvd
nvd
CVE-2016-9463
2017-03-28 02:59:00
openvas
openvas
Nextcloud Multiple Vulnerabilities - Linux
2017-03-30 00:00:00
Nextcloud Multiple Vulnerabilities - Windows
2017-03-30 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON
Related for CVE-2016-9463
hackerone1ubuntucve1osv1cvelist1nextcloud1prion1nvd1openvas2