Lucene search

K
nextcloudKevin "Kenny" NiehageNC-SA-2020-040
HistoryOct 03, 2020 - 12:00 a.m.

Improper confidentiality protection of server-side encryption keys (NC-SA-2020-040)

2020-10-0300:00:00
Kevin "Kenny" Niehage
nextcloud.com
10

0.001 Low

EPSS

Percentile

23.8%

Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on.

CPENameOperatorVersion
nextcloud serverlt20.0.0

0.001 Low

EPSS

Percentile

23.8%