Lucene search

K
hackeroneBugdiscloseguysH1:146133
HistoryJun 20, 2016 - 10:42 p.m.

Nextcloud: Authentication Issue

2016-06-2022:42:59
bugdiscloseguys
hackerone.com
$50
24

EPSS

0.001

Percentile

28.4%

  1. UserA creates a password protected share
  2. UserA shares this link with UserB
  3. UserB accessed the share with the password
  4. UserA changes the password
  5. Now userB can still access the share.

At step 5 userB should be prompted to authenticate again.

EPSS

0.001

Percentile

28.4%