4.3med
CVE-2016-9464
Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares.
Published 9 y ago · modified 4 mo ago · JSON
CVSS
4.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.6%
percentile 76%
Public exploits
0
none known
Summary
Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares. The Sharing Backend as implemented in Nextcloud does differentiate between shares to users and groups. In case of a received group share, users should be able to unshare the file to themselves but not to the whole group. The previous API implementation simply unshared the file to all users in the group.
Exploit prediction (EPSS)
1.62% probability of exploitation in the next 30 days, higher than 76% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 4.3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Affected products
- n/a Nextcloud Server Nextcloud Server before 9.0.54 and 10.0.0
Classification
- Weakness
- CWE-285 Improper Authorization
References
- github.com /nextcloud/server/commit/7289cb5ec0b812992ab0dfb889744b94bc0994f0 · x_refsource_MISC, x_transferred
- github.com /nextcloud/server/commit/3387e5d00fcf6b2ea6b285a091e5743f545e7202 · x_refsource_MISC, x_transferred
- github.com /nextcloud/server/commit/a5471b4a3e3f30e99e4de39c97c0c3b3c2f1618f · x_refsource_MISC, x_transferred
- github.com /nextcloud/server/commit/e2c4f4f9aa11bc92e8f2212cce73841b922187e8 · x_refsource_MISC, x_transferred
- securityfocus.com /bid/97287 · vdb-entry, x_refsource_BID, x_transferred
- nextcloud.com /security/advisory/?id=nc-sa-2016-007 · x_refsource_MISC, x_transferred
- hackerone.com /reports/153905 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2016-9464
- NVD: CVE-2016-9464
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.