CVE-2018-16463

A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.

Score

CVSS 3.0 3.1 Low

Status

Modified - support@hackerone.com

Published

2018-10-30

Last modified

2024-08-05

Weaknesses

CWE-384

Affected products

• Nextcloud Server (Nextcloud)

References

• https://hackerone.com/reports/237184
• https://nextcloud.com/security/advisory/?id=NC-SA-2018-013