CVE-2020-8183

High

A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call.

hackerone·CWE-256·Published 2020-10-30

CVSS

7.5

EPSS

0.02

KEV

Exploits

cve.orgen

139 chars

A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call.

NVDen

139 chars

A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call.

Un error lógico en Nextcloud Server versión 19.0.0, causó un almacenamiento de texto plano de la contraseña compartida cuando se proporcionó en la llamada de la API de creación inicial

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N