VULNERABILITY INTELLIGENCE

CVE-2018-16463

CVSS score3.1 LOW
EPSS probability0.55%
CISA KEVNot currently listed
Published2018-10-30
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N

Description

A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.

Weakness classification

  • CWE-384: Session Fixation

Primary references