CVEvulnerability
CVE-2020-8150
4.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-11-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.1 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-310, CWE-311
Description
A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files.
Affected configurations
• nextcloud nextcloud server (< 19.0.2)
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-311 Missing Encryption of Sensitive Data weakness
References
- http://seclists.org/fulldisclosure/2020/Dec/55 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Dec/57 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Dec/58 Mailing List, Third Party Advisory
- https://hackerone.com/reports/742588 Exploit, Third Party Advisory
- https://nextcloud.com/security/advisory/?id=NC-SA-2020-039 Vendor Advisory
- http://seclists.org/fulldisclosure/2020/Dec/55 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Dec/57 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Dec/58 Mailing List, Third Party Advisory
- https://hackerone.com/reports/742588 Exploit, Third Party Advisory
- https://nextcloud.com/security/advisory/?id=NC-SA-2020-039 Vendor Advisory