CVE-2017-0936

Published: Mar 28, 2018Modified: Nov 21, 2024

5.7

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Exploitability: 2.1 / Impact: 3.6

Source: NVD

Description

Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user.

Affected (2)

Products: Nextcloud: Nextcloud Server

1 product

Nextcloud Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Nextcloud Nextcloud Server	Before 11.0.7
Nextcloud Nextcloud Server	Version 12.0.5

Related CWEs

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (4)

https://hackerone.com/reports/297751

Source: support@hackerone.com

Third Party Advisory

https://nextcloud.com/security/advisory/?id=nc-sa-2018-001

Source: support@hackerone.com

Vendor Advisory

https://hackerone.com/reports/297751

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://nextcloud.com/security/advisory/?id=nc-sa-2018-001

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.