Description
A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Server | 19.0.2 | — |
References
- https://hackerone.com/reports/742588
- https://nextcloud.com/security/advisory/?id=NC-SA-2020-039
- 20201225 Re: [FD] CVE-2020-8150 - Remote Code Execution as SYSTEM/root via Backblaze mailing-list
- 20201229 Re: [FD] CVE-2020-8150 - Remote Code Execution as SYSTEM/root via Backblaze mailing-list
- 20201229 Re: CVE-2020-8150 - Remote Code Execution as SYSTEM/root via Backblaze mailing-list