Lucene search

CVE-2019-15623

🗓️ 04 Feb 2020 20:12:15Reported by [email protected]Type

Exposure of Private Information in Nextcloud Serve

Reporter	Title	Published	Views	Family All 12
Cvelist	CVE-2019-15623	4 Feb 202019:08	–	cvelist
OpenVAS	Nextcloud Server < 14.0.13, < 15.0.9, < 16.0.2 Information Disclosure Vulnerability (NC-SA-2019-016)	5 Feb 202000:00	–	openvas
OpenVAS	openSUSE: Security Advisory for nextcloud (openSUSE-SU-2020:0220-1)	16 Feb 202000:00	–	openvas
Nextcloud	User IDs and Nextcloud server leaked to Nextcloud Lookup server with disabled settings (NC-SA-2019-016)	26 Jun 201900:00	–	nextcloud
Prion	Code injection	4 Feb 202020:15	–	prion
OSV	CVE-2019-15623	4 Feb 202020:15	–	osv
Hacker One	Nextcloud: Nextcloud domain and name of every user leaked to lookup server	12 Mar 201915:45	–	hackerone
CVE	CVE-2019-15623	4 Feb 202020:15	–	cve
Tenable Nessus	openSUSE Security Update : nextcloud (openSUSE-2020-220)	18 Feb 202000:00	–	nessus
SUSE Linux	Security update for nextcloud (moderate)	15 Feb 202000:00	–	suse

Nvd

Node

nextcloud nextcloud_serverRange<14.0.13

nextcloud nextcloud_serverRange15.0.0–15.0.9

nextcloud nextcloud_serverRange16.0.0–16.0.2

Node

opensuse backports_sleMatch15.0sp1

suse package_hubMatch-

Source	Link
hackerone	www.hackerone.com/reports/508490
lists	www.lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html
nextcloud	www.nextcloud.com/security/advisory/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Feb 2020 20:15Current

6.0Medium risk

Vulners AI Score6.0

CVSS25.0

CVSS35.3

EPSS0.002

CWE-359