Lucene search
Kevin "Kenny" NiehageNC-SA-2020-038HistoryAug 26, 2020 - 12:00 a.m.
Message Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a file (NC-SA-2020-038)
2020-08-2600:00:00
Kevin "Kenny" Niehage
nextcloud.com
9
0.001 Low
EPSS
Percentile
41.8%
A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud server | lt | 19.0.2 | |
| nextcloud server | lt | 18.0.8 | |
| nextcloud server | lt | 17.0.10 |
Related
openvas
openvas
Nextcloud Server File Block Overwrite Vulnerability (NC-SA-2020-038)
2020-12-01 00:00:00
cvelist
cvelist
CVE-2020-8133
2020-11-09 14:25:24
cve
cve
CVE-2020-8133
2020-11-09 15:15:13
nvd
nvd
CVE-2020-8133
2020-11-09 15:15:13
osv
osv
CVE-2020-8133
2020-11-09 15:15:13
hackerone
hackerone
prion
prion
Design/Logic Flaw
2020-11-09 15:15:00