Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2022/11/25 12:0 a.m.26 views

CVE-2022-39334 nextcloudcmd incorrectly trusts bad TLS certificates

Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack that exposes sensitive data or...

3.9CVSS5.2AI score0.00201EPSS
SaveExploits1References4
Rows per page
Query Builder