Detections
Analytics

CVE-2018-3775

high

Description

Improper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obtained user credentials to bypass the 2 Factor Authentication.

References

https://nextcloud.com/security/advisory/?id=NC-SA-2018-007

https://hackerone.com/reports/248656

Details

Source: Mitre, NVD

Published: 2018-08-12

Updated: 2023-02-27

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High