Weak Encryption

2023-04-1820:33:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

nextcloud

desktop

vulnerability

weak encryption

malicious server administrator

end-to-end encrypted files

0.001 Low

EPSS

Percentile

43.0%

JSON

nextcloud-desktop is vulnerable to Weak Encryption. The vulnerability allows a malicious server administrator to recover and modify contents of end-to-end encrypted files.

CPENameOperatorVersion
nextcloud-desktop:sideq3.1.1-1
nextcloud-desktop:sideq3.0.1-3
nextcloud-client:edgeeq3.5.4-r0
nextcloud-client:edgeeq3.6.0-r0
nextcloud-client:edgeeq3.4.2-r0
nextcloud-client:edgeeq2.6.3-r2
nextcloud-client:edgeeq3.1.2-r0
nextcloud-client:edgeeq3.4.4-r2
nextcloud-client:edgeeq3.3.5-r0
nextcloud-client:edgeeq3.1.3-r1

Name	Operator	Version
nextcloud-desktop:sid	eq	3.1.1-1
nextcloud-desktop:sid	eq	3.0.1-3
nextcloud-client:edge	eq	3.5.4-r0
nextcloud-client:edge	eq	3.6.0-r0
nextcloud-client:edge	eq	3.4.2-r0
nextcloud-client:edge	eq	2.6.3-r2
nextcloud-client:edge	eq	3.1.2-r0
nextcloud-client:edge	eq	3.4.4-r2
nextcloud-client:edge	eq	3.3.5-r0
nextcloud-client:edge	eq	3.1.3-r1