CVE-2019-15612

CVE-2019-15612

Vendor N/A

Product Nextcloud Server

Weakness CWE-384 · Session fixation

Published February 4, 2020

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset.

Key dates

02Disclosure timeline

February 4, 2020 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-15612 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/384.html

Related vulnerabilities

04Related CVE

CVE-2026-23796 Session Fixation in Quick.Cart CVE-2024-24823 graylog2-server Session Fixation vulnerability through cookie injection CVE-2020-5290 session fixation in rCTF CVE-2023-22479 KubePi vulnerable to session fixation attack CVE-2026-23624 GLPI is vulnerable to session stealing on externally authenticated user change