Authentication Bypass Using an Alternate Path or Channel
CVE-2019-5455
Summary
Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process.
- LOW
- PHYSICAL
- HIGH
- UNCHANGED
- NONE
- NONE
- HIGH
- HIGH
CWE-288 - Authentication Bypass Using an Alternate Path or Channel
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
References
Advisory Timeline
- Published
