Lucene search
Veracode Vulnerability DatabaseVERACODE:31788HistoryAug 23, 2021 - 11:44 a.m.
Insecure Certificate Validation
2021-08-2311:44:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
nextcloud
desktop
client
certificate validation
ssl
verification
provider
software
EPSS
0.002
Percentile
56.7%
Nextcloud Desktop Client is using an insecure certificate validation. It is possible due to lack of SSL certificate verification when using the “Register with a Provider” flow.
Related
osv
osv
CVE-2021-22895
2021-06-11 16:15:10
nextcloud-desktop - security update
2021-09-19 00:00:00
prion
prion
Input validation
2021-06-11 16:15:00
cve
cve
CVE-2021-22895
2021-06-11 16:15:10
nextcloud
nextcloud
SSL certificate was not validated in Provider Registration Flow
2021-06-01 17:50:39
nvd
nvd
CVE-2021-22895
2021-06-11 16:15:10
hackerone
hackerone
Nextcloud: SSL certificate not validated when registering with a provider
2020-06-20 01:40:16
debiancve
debiancve
CVE-2021-22895
2021-06-11 16:15:10
ubuntucve
ubuntucve
CVE-2021-22895
2021-06-11 00:00:00
cvelist
cvelist
CVE-2021-22895
2021-06-11 15:49:38
debian
debian
[SECURITY] [DSA 4974-1] nextcloud-desktop security update
2021-09-19 10:35:13
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0421)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-4974-1)
2021-09-20 00:00:00
nessus
nessus
Debian DSA-4974-1 : nextcloud-desktop - security update
2021-09-19 00:00:00
mageia
mageia
Updated nextcloud-client packages fix security vulnerability
2021-09-23 07:49:29