SB2019101812 - Insufficiently protected credentials in Nextcloud server
Published: October 18, 2019 Updated: August 8, 2020
Security Bulletin ID
SB2019101812
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Insufficiently protected credentials (CVE-ID: CVE-2019-17393)
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP (in cleartext) that can be sniffed by unauthorized actors. Basic authentication is used for the authentication, making it possible to base64 decode the sniffed credentials and discover the username and password.
Remediation
Install update from vendor's website.