Description
Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.
References (5)
Scores
CVSS v3
6.7
EPSS
0.0063
EPSS Percentile
70.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-521
CWE-257
Status
published
Products (2)
fedoraproject/fedora
34
nextcloud/nextcloud_server
< 20.0.0
Published
Mar 03, 2021
Tracked Since
Feb 18, 2026