Skip to content
OpenAdvisories
Medium · 4.7 CVE-2021-32658 EUVD-2021-19478

Sensitive data may not be removed from storage on account removal

Published Jun 8, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

Nextcloud Android is the Android client for the Nextcloud open source home cloud system. Due to a timeout issue the Android client may not properly clean all sensitive data on account removal. This could include sensitive key material such as the End-to-End encryption keys. It is recommended that the Nextcloud Android App is upgraded to 3.16.1

Affected products

VendorProductAffectedFixed
nextcloud security-advisories < 3.16.1 —

References