Description
Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the encryption keys.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Nextcloud Server | Fixed in 20.0.0 | — |
Unscored
CVE-2020-8259
EUVD-2020-29129GHSA-548f-j4fj-64c5
Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the encryption keys.
Published Nov 16, 2020 · Updated Aug 4, 2024 · Assigned by hackerone