CVE-2018-3775 - AskarLabs CVE Database

CVE-2018-3775

Vendor Hackerone

Product Nextcloud Server

Weakness CWE-287 · Improper authentication

Published August 12, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obtained user credentials to bypass the 2 Factor Authentication.

Key dates

02Disclosure timeline

August 12, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-3775 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2020-25183 Medtronic MyCareLink Smart Improper Authentication CVE-2026-3794 doramart DoraCMS Email API send improper authentication CVE-2017-14006 CVE-2024-40648 `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk CVE-2026-41679 Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass