CVE-2018-16464 - AskarLabs CVE Database

CVE-2018-16464

Vendor N/A

Product Nextcloud Server

Weakness CWE-287 · Improper authentication

Published October 30, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password.

Key dates

02Disclosure timeline

October 30, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-16464 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2023-37918 API token authentication bypass in HTTP endpoints in Dapr CVE-2026-32815 SiYuan: Cross-Origin WebSocket Hijacking via Authentication Bypass — Unauthenticated Information Disclosure CVE-2024-37313 Nextcloud server allows the by-pass the second factor CVE-2024-7401 Client Enrollment Process Bypass CVE-2020-14380