Session fixation

2018-10-3021:29:00

PRIOn knowledge base

www.prio-n.com

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.

CPENameOperatorVersion
nextcloud_serverlt12.0.8
nextcloud_serverge13.0.0
nextcloud_serverlt13.0.3
nextcloud_servereq14.0.0 rc1
nextcloud_servereq14.0.0 rc2
nextcloud_servereq14.0.0 beta1
nextcloud_servereq14.0.0 beta2
nextcloud_servereq14.0.0 beta3
nextcloud_servereq14.0.0 beta4

Name	Operator	Version
nextcloud_server	lt	12.0.8
nextcloud_server	ge	13.0.0
nextcloud_server	lt	13.0.3
nextcloud_server	eq	14.0.0 rc1
nextcloud_server	eq	14.0.0 rc2
nextcloud_server	eq	14.0.0 beta1
nextcloud_server	eq	14.0.0 beta2
nextcloud_server	eq	14.0.0 beta3
nextcloud_server	eq	14.0.0 beta4