CVE-2022-39329CWE-284CWE-285

Profile of disabled user stays accessible

Low · published October 27, 2022

CVSS v3.1
3.5
EPSS
1%
Percentile
51.6
In the wild
Unconfirmed
What it is

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00674 · 51.6th percentile
Weaknesses
CWE-284 · Improper Access Control; CWE-285 · Improper Authorization
Published
2022-10-27T00:00Z
EPSS history
Timeline
  • 27 OCT 00:00Z
    Profile of disabled user stays accessible
    cvelistv5