VULNERABILITY INTELLIGENCE

CVE-2019-5453

CVSS score6.1 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2019-07-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider.

Weakness classification

  • CWE-287: Improper Authentication
  • CWE-288: Authentication Bypass Using an Alternate Path or Channel

Primary references