CVE-2019-5452 — Improper Access Control in Nextcloud

CWE-284 — Improper Access Control3 documents3 sources
Severity
2.4LOWNVD
EPSS
0.1%
top 82.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
NextcloudNextcloud Com.nextcloud.client
Timeline
PublishedJul 30
Latest updateMay 24

Description

Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 0.9 | Impact: 1.4

Affected Packages2 packages

▶NVDnextcloud/nextcloud< 3.6.2

🔴Vulnerability Details

2
GHSA
GHSA-ghq6-qfqp-33g5: Bypass lock protection in the Nextcloud Android app prior to version 3↗2022-05-24
▶
CVEList
CVE-2019-5452: Bypass lock protection in the Nextcloud Android app prior to version 3↗2019-07-30
▶
CVE-2019-5452 — Improper Access Control in Nextcloud | cvebase