Violation of Secure Design Principles

CVE-2020-8133

Medium

5.3/10

Summary

A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: LOW
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: NONE

CWE-657 - Violation of Secure Design Principles

The product violates well-established principles for secure design.

References

Advisory Timeline

Published Nov 09, 2020