CVE-2020-8236CWE-287

A wrong configuration in Nextcloud Server 19.0.1 incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the…

published October 30, 2020

CVSS
—
EPSS
1%
Percentile
47.5
In the wild
Unconfirmed
What it is

A wrong configuration in Nextcloud Server 19.0.1 incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00590 · 47.5th percentile
Weakness
CWE-287 · Improper Authentication
Published
2020-10-30T18:11Z
EPSS history
Timeline
  • 30 OCT 18:11Z
    A wrong configuration in Nextcloud Server 19.0.1 incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the…
    cvelistv5