Unscored CVE-2020-8225 EUVD-2020-29098GHSA-j6gm-vwj7-5633

A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentic…

Published Sep 18, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Package: nextcloud-desktop Package: nextcloud-desktop Ecosystem: Debian Ecosystem: Ubuntu

Description

A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials.

Affected products

Vendor	Product	Affected	Fixed
—	Desktop Client	Fixed in 2.6.5	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	nextcloud-desktop	3.0.1-1	—
Debian 13	nextcloud-desktop	3.0.1-1	—
Debian 12	nextcloud-desktop	3.0.1-1	—

Ubuntu