CVE-2019-15623 - AskarLabs CVE Database

CVE-2019-15623

Vendor N/A

Product Nextcloud Server

Weakness CWE-359

Published February 4, 2020

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Lookup server is disabled.

Key dates

02Disclosure timeline

February 4, 2020 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-15623 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/359.html

Related vulnerabilities

04Related CVE

CVE-2023-29203 Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm CVE-2025-13008 Session Token Disclosure in M-Files Web CVE-2021-21823 CVE-2026-3911 Org.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpoint CVE-2025-66605