CVE-2020-8152CWE-522

Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on

published November 16, 2020

CVSS
—
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.1th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2020-11-16T00:36Z
EPSS history
Timeline
  • 16 NOV 00:36Z
    Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on
    cvelistv5