CVE-2019-15611 Vulnerability Details

  /     /     /  

CVE-2019-15611 Metadata Quick Info

CVE Published: 04/02/2020 | CVE Updated: 05/08/2024 | CVE Year: 2019
Source: hackerone | Vendor: n/a | Product: Nextcloud iOS
Status : PUBLISHED

---

CVE-2019-15611 Description

Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or registering for push notifications.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-657
CWE Name: Violation of Secure Design Principles (CWE-657)
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).