CVE-2019-15621

Katalog CVE

CVSS 6.5 · Medium EPSS 1,1%

Kerentanan Improper Preservation of Permissions pada nextcloud server. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link.

Rincian

Terbit di NVD

4 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-281: Improper Preservation of Permissions

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 63,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nextcloud.com/security/advisory/?id=NC-SA-2020-012 advisory vendor
• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html
• https://hackerone.com/reports/619484 permissions required