CVE-2020-8173

CVE-2020-8173

Vendor N/A

Product Nextcloud Server

Weakness CWE-310

Published October 30, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended.

Key dates

02Disclosure timeline

October 30, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8173 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/310.html

Related vulnerabilities

04Related CVE

CVE-2019-3740 CVE-2024-20690 Windows Nearby Sharing Spoofing Vulnerability CVE-2019-9506 Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation CVE-2024-26228 Windows Cryptographic Services Security Feature Bypass Vulnerability CVE-2025-21482 Cryptographic Issues in Core