Lucene search

HackeroneCVELIST:CVE-2020-8156

HistoryMay 12, 2020 - 1:01 p.m.

CVE-2020-8156

2020-05-1213:01:22

CWE-295

hackerone

www.cve.org

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

50.0%

JSON

A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.

CNA Affected

[
  {
    "product": "Nextcloud Mail",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.1.4"
      }
    ]
  }
]

References

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/

nextcloud.com/security/advisory/?id=NC-SA-2020-020