CVE-2020-8225 — Cleartext Storage of Sensitive Info in Desktop

CWE-312 — Cleartext Storage of Sensitive Info5 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.6%
top 31.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nextcloud Desktop
Timeline
PublishedSep 18
Latest updateMay 24

Description

A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDnextcloud/desktop< 2.6.5

🔴Vulnerability Details

3
GHSA
GHSA-j6gm-vwj7-5633: A cleartext storage of sensitive information in Nextcloud Desktop Client 2↗2022-05-24
▶
OSV
CVE-2020-8225: A cleartext storage of sensitive information in Nextcloud Desktop Client 2↗2020-09-18
▶
CVEList
CVE-2020-8225: A cleartext storage of sensitive information in Nextcloud Desktop Client 2↗2020-09-18
▶

📋Vendor Advisories

1
Debian
CVE-2020-8225: nextcloud-desktop - A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 g...↗2020
▶
CVE-2020-8225 — Cleartext Storage of Sensitive Info | cvebase