SB2020020428 - Multiple vulnerabilities in Nextcloud Server

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2020020428

SB2020020428 - Multiple vulnerabilities in Nextcloud Server

Published: February 4, 2020 Updated: July 17, 2020

Security Bulletin ID SB2020020428
Severity
Medium
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Server-Side Request Forgery (SSRF) (CVE-ID: CVE-2020-8118)

The vulnerability allows a remote authenticated user to gain access to sensitive information.

An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application.


2) Improper Preservation of Permissions (CVE-ID: CVE-2019-15621)

The vulnerability allows a remote authenticated user to manipulate data.

Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link.


3) Information disclosure (CVE-ID: CVE-2019-15623)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.


Remediation

Install update from vendor's website.

References