CVE-2021-32680CWE-778

Audit log is not properly logging unsetting of share expiration date

Low · published July 12, 2021

CVSS v3.1
3.3
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

Nextcloud Server is a Nextcloud package that handles data storage. In versions priot to 19.0.13, 20.0.11, and 21.0.3, Nextcloud Server audit logging functionality wasn't properly logging events for the unsetting of a share expiration date. This event is supposed to be logged. This issue is patched in versions 19.0.13, 20.0.11, and 21.0.3.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weakness
CWE-778 · Insufficient Logging
Published
2021-07-12T13:25Z
EPSS history
Timeline
  • 12 JUL 13:25Z
    Audit log is not properly logging unsetting of share expiration date
    cvelistv5