Lucene search

HackeroneCVELIST:CVE-2020-8150

HistoryNov 09, 2020 - 2:19 p.m.

CVE-2020-8150

2020-11-0914:19:42

CWE-310

hackerone

www.cve.org

nextcloud

server

cryptographic issue

downgrade

vulnerability

encryption scheme

integrity

encrypted files

AI Score

4.2

Confidence

High

EPSS

0.001

Percentile

21.2%

JSON

A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files.

CNA Affected

[
  {
    "product": "Nextcloud Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "19.0.2"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2020/Dec/55

seclists.org/fulldisclosure/2020/Dec/57

seclists.org/fulldisclosure/2020/Dec/58

hackerone.com/reports/742588

nextcloud.com/security/advisory/?id=NC-SA-2020-039