Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40404
HistoryMay 04, 2023 - 2:29 p.m.

Missing Encryption Of Sensitive Data

2023-05-0414:29:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
nextcloud-client
encryption
sensitive data
vulnerability
metadata
e2ee
files

0.001 Low

EPSS

Percentile

47.8%

nextcloud-client is vulnerable to Missing Encryption of Sensitive Data. The vulnerability is caused due to a Lack of authenticity of metadata keys allowing a malicious server to gain access to E2EE folders resulting in it being able to decrypt files, recover the folder structure and add new files.

0.001 Low

EPSS

Percentile

47.8%