Missing Encryption of Sensitive Data
CVE-2020-8173
Summary
A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended.
- MEDIUM
- NETWORK
- SINGLE
- NONE
- PARTIAL
- NONE
CWE-311 - Missing Encryption of Sensitive Data
The software does not encrypt sensitive or critical information before storage or transmission.
References
Advisory Timeline
- Published
