Description
A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Server | 17.0.1 | — |
Unscored
CVE-2019-15617
EUVD-2019-6574GHSA-mr7g-84h2-qmm4
A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login.
Published Feb 4, 2020 · Updated Aug 5, 2024 · Assigned by hackerone