CVE-2019-15623 | BDVDB-2026-130207 Detail

Nextcloud Server

Description#

Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-359 Privacy Violation (CWE-359)

References#

https://hackerone.com/reports/508490
https://nextcloud.com/security/advisory/?id=NC-SA-2019-016
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00019.html
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00022.html

Exploit#

No public exploit known

History#

Version 12020-02-04Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.