Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2022/11/25 12:00 a.m.•36 views

CVE-2022-39334 nextcloudcmd incorrectly trusts bad TLS certificates

Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack that exposes sensitive data or...

3.9CVSS5.2AI score0.00207EPSS
SaveExploits1References4
Rows per page
Query Builder