CVE-2019-15612CWE-384

A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset

published February 4, 2020

CVSS
—
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.7th percentile
Weakness
CWE-384 · Session Fixation
Published
2020-02-04T19:08Z
EPSS history
Timeline
  • 04 FEB 19:08Z
    A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset
    cvelistv5