CVE-2022-24885
Improper Authentication in Nextcloud Android Files
Résumé
Improper Authentication in Nextcloud Android Files
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1, users can bypass a lock on the Nextcloud app on an Android device by repeatedly reopening the app. Version 3.19.1 contains a fix for the problem. There are currently no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
nextcloud
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.19.1"}]}]
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- web hackerone.com