CVE-2019-15611
Global infos:
Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or registering for push notifications.
CVE Status: Modified
References:
Metrics:
| Attribute | Value |
|---|---|
| Attack Complexity | LOW |
| Attack Vector | NETWORK |
| Availability Impact | NONE |
| Base Score | 4.9 |
| Base Severity | MEDIUM |
| Confidentiality Impact | HIGH |
| Integrity Impact | NONE |
| Privileges Required | HIGH |
| Scope | UNCHANGED |
| User Interaction | NONE |
| Vector String | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
| Exploitability Score | 1.2 |
| Impact Score | 3.6 |
| Source | [email protected] |
| Type | Primary |