CVE-2018-3775

EPSS 1.2%CWE-287

Improper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obtained user credentials to bypass the 2 Factor Authentication.

Produtos afetados

HackerOne · Nextcloud Server

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://hackerone.com/reports/248656 https://nextcloud.com/security/advisory/?id=NC-SA-2018-007