CVE-2019-15623

Katalog CVE

CVSS 5.3 · Medium EPSS 1,9%

Kerentanan Exposure of Private Personal Information to an Unauthorized Actor pada nextcloud server, opensuse backports sle +1 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.

Rincian

Terbit di NVD

4 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 79,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://nextcloud.com/security/advisory/?id=NC-SA-2019-016 advisory pihak ketiga · advisory vendor
• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html advisory pihak ketiga
• https://hackerone.com/reports/508490 exploit · advisory pihak ketiga