CVE-2020-8156

CVE-2020-8156

Vendor N/A

Product Nextcloud Mail

Weakness CWE-295

Published May 12, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.

Key dates

02Disclosure timeline

May 12, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8156 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/295.html

Related vulnerabilities

04Related CVE

CVE-2019-3777 Apps Manager unverified SSL certs in Cloud Controller proxy CVE-2026-53475 Assisted-migration-agent: tls verification disabled on all vcenter connections CVE-2024-52329 ECOVACS HOME mobile app plugins do not properly validate TLS certificates CVE-2021-20989 Fibaro Home Center Insufficient remote access server authorization CVE-2022-48186