2 matches found
CVE-2020-8236
Nextcloud Server 19.0.1 contains an improper authentication issue where a misconfiguration causes a passwordless WebAuthn PIN to be treated as two-factor authentication, but the PIN is not actually verified. This vulnerability could lead to users believing they have 2FA protection when the system...
6.8CVSS6.6AI score0.0059EPSS
SaveExploits1References2Affected Software1
Fedora 33 : nextcloud (2020-050aaa14f7)
Update to Nextcloud 19.0.3, fixes CVE-2020-8236, CVE-2020-8223, CVE-2020-8183, CVE-2020-8173 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
7.5CVSS5.9AI score0.01912EPSS
SaveExploits4References5
20