CVE-2018-16463CWE-384

A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password…

published October 30, 2018

CVSS
—
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00545 · 44.9th percentile
Weakness
CWE-384 · Session Fixation
Published
2018-10-30T21:00Z
EPSS history
Timeline
  • 30 OCT 21:00Z
    A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password…
    cvelistv5