CVEvulnerability
CVE-2019-15611
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-02-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-657
Description
Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or registering for push notifications.
Affected configurations
• nextcloud nextcloud (< 2.24.0)
Related
Weakness · CWE (1)
- CWE-657 Violation of Secure Design Principles weakness
References
- https://hackerone.com/reports/672623 Permissions Required, Third Party Advisory
- https://nextcloud.com/security/advisory/?id=NC-SA-2019-017 Vendor Advisory
- https://hackerone.com/reports/672623 Permissions Required, Third Party Advisory
- https://nextcloud.com/security/advisory/?id=NC-SA-2019-017 Vendor Advisory