Lucene search
Aleksa SaraiNC-SA-2018-011HistoryOct 25, 2018 - 12:00 a.m.
Second factor authentication bypassed if provider fails to load (NC-SA-2018-011)
2018-10-2500:00:00
Aleksa Sarai
nextcloud.com
14
0.001 Low
EPSS
Percentile
22.9%
Missing state would not enforce the use of a second factor at login if the the provider of the second factor failed to load.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud server | lt | 14.0.0 |
Related
nvd
nvd
CVE-2018-16465
2018-10-30 21:29:00
prion
prion
Design/Logic Flaw
2018-10-30 21:29:00
cve
cve
CVE-2018-16465
2018-10-30 21:29:00
hackerone
hackerone
Nextcloud: twofactor_auth bypassable if provider fails to load
2018-02-20 01:00:10
osv
osv
CVE-2018-16465
2018-10-30 21:29:00
cvelist
cvelist
CVE-2018-16465
2018-10-30 21:00:00
