CVEvulnerability

CVE-2019-5453

6.1 MEDIUM Published 2019-07-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-07-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-287, CWE-288

Description

Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider.

Affected configurations

• nextcloud nextcloud (<= 3.2.4) • nextcloud nextcloud 3.3.0

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-288 Authentication Bypass Using an Alternate Path or Channel weakness

References