Lucene search
Leon KlingeleNC-SA-2019-016HistoryJun 26, 2019 - 12:00 a.m.
User IDs and Nextcloud server leaked to Nextcloud Lookup server with disabled settings (NC-SA-2019-016)
2019-06-2600:00:00
Leon Klingele
nextcloud.com
10
0.002 Low
EPSS
Percentile
55.0%
Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it’s domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nextcloud server | lt | 16.0.2 | |
| nextcloud server | lt | 15.0.9 | |
| nextcloud server | lt | 14.0.13 |
Related
cvelist
cvelist
CVE-2019-15623
2020-02-04 19:08:57
openvas
openvas
nvd
nvd
CVE-2019-15623
2020-02-04 20:15:12
hackerone
hackerone
Nextcloud: Nextcloud domain and name of every user leaked to lookup server
2019-03-12 15:45:55
prion
prion
Code injection
2020-02-04 20:15:00
osv
osv
CVE-2019-15623
2020-02-04 20:15:12
cve
cve
CVE-2019-15623
2020-02-04 20:15:12
suse
suse
Security update for nextcloud (moderate)
2020-02-15 00:00:00
Security update for nextcloud (moderate)
2020-02-17 00:00:00
nessus
nessus
openSUSE Security Update : nextcloud (openSUSE-2020-220)
2020-02-18 00:00:00
redhatcve
redhatcve
CVE-2019-15618
2022-05-21 00:15:43