{"containers": {"cna": {"affected": [{"product": "Nextcloud Server", "vendor": "Nextcloud", "versions": [{"status": "affected", "version": "before 11.0.7 and 12.0.5"}]}], "datePublic": "2018-02-07T00:00:00", "descriptions": [{"lang": "en", "value": "Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-639", "description": "Authorization Bypass Through User-Controlled Key (CWE-639)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2018-03-28T19:57:01", "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://hackerone.com/reports/297751"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://nextcloud.com/security/advisory/?id=nc-sa-2018-001"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "support@hackerone.com", "DATE_PUBLIC": "2018-02-07T00:00:00", "ID": "CVE-2017-0936", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Nextcloud Server", "version": {"version_data": [{"version_value": "before 11.0.7 and 12.0.5"}]}}]}, "vendor_name": "Nextcloud"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Authorization Bypass Through User-Controlled Key (CWE-639)"}]}]}, "references": {"reference_data": [{"name": "https://hackerone.com/reports/297751", "refsource": "MISC", "url": "https://hackerone.com/reports/297751"}, {"name": "https://nextcloud.com/security/advisory/?id=nc-sa-2018-001", "refsource": "CONFIRM", "url": "https://nextcloud.com/security/advisory/?id=nc-sa-2018-001"}]}}}}, "cveMetadata": {"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "assignerShortName": "hackerone", "cveId": "CVE-2017-0936", "datePublished": "2018-02-07T00:00:00", "dateReserved": "2016-11-30T00:00:00", "dateUpdated": "2018-03-28T19:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "651BDB58-3505-4B06-B55E-4F65A997F795", "versionEndExcluding": "11.0.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:nextcloud:nextcloud_server:12.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "8BB2F56C-B9AF-4EAF-B41D-C18EA221CF58", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user."}, {"lang": "es", "value": "Nextcloud Server en versiones anteriores a la 11.0.7 y versiones 12.0.5 contiene una vulnerabilidad de omisi\u00f3n de autorizaci\u00f3n mediante una clave controlada por el usuario. La falta de una verificaci\u00f3n de propiedad permit\u00eda a los usuarios con sesi\u00f3n iniciada modificar el alcance de las contrase\u00f1as de la aplicaci\u00f3n de otros usuarios. Hay que tener en cuenta que las contrase\u00f1as de app no se revelaban de por s\u00ed y que el error no se puede utilizar para identificarse como otro usuario."}], "id": "CVE-2017-0936", "lastModified": "2019-10-09T23:21:14.523", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.9, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 2.1, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-03-28T20:29:00.270", "references": [{"source": "support@hackerone.com", "tags": ["Third Party Advisory"], "url": "https://hackerone.com/reports/297751"}, {"source": "support@hackerone.com", "tags": ["Vendor Advisory"], "url": "https://nextcloud.com/security/advisory/?id=nc-sa-2018-001"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-639"}], "source": "support@hackerone.com", "type": "Secondary"}]}

{}