Lucene search
Leon KlingeleNC-SA-2019-016HistoryJun 26, 2019 - 12:00 a.m.
User IDs and Nextcloud server leaked to Nextcloud Lookup server with disabled settings (NC-SA-2019-016)
2019-06-2600:00:00
Leon Klingele
nextcloud.com
8
Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it’s domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud server | lt | 16.0.2 | |
| nextcloud server | lt | 15.0.9 | |
| nextcloud server | lt | 14.0.13 |
Related
openvas
openvas
prion
prion
Code injection
2020-02-04 20:15:00
osv
osv
CVE-2019-15623
2020-02-04 20:15:12
hackerone
hackerone
Nextcloud: Nextcloud domain and name of every user leaked to lookup server
2019-03-12 15:45:55
cve
cve
CVE-2019-15623
2020-02-04 20:15:00
nessus
nessus
openSUSE Security Update : nextcloud (openSUSE-2020-220)
2020-02-18 00:00:00
suse
suse
Security update for nextcloud (moderate)
2020-02-15 00:00:00
Security update for nextcloud (moderate)
2020-02-17 00:00:00
redhatcve
redhatcve
CVE-2019-15618
2022-05-21 00:15:43
Related for NC-SA-2019-016