What is the severity of CVE-2018-16463?

CVE-2018-16463 has been categorized as a medium severity vulnerability.

How do I fix CVE-2018-16463?

To fix CVE-2018-16463, you should update your Nextcloud Server to version 14.0.0 or later, or to versions 13.0.3 and 12.0.8.

What applications are affected by CVE-2018-16463?

CVE-2018-16463 affects Nextcloud Server versions prior to 14.0.0, 13.0.3, and 12.0.8.

What vulnerabilities are associated with CVE-2018-16463?

CVE-2018-16463 is linked to session fixation vulnerabilities that may allow unauthorized access to password protected shares.

When was CVE-2018-16463 discovered?

CVE-2018-16463 was reported in 2018, reflecting vulnerabilities in earlier versions of Nextcloud Server.

Vulnerability/
CVE-2018-16463

low

3.6

CWE

384

30/10/2018

5/8/2024

CVE-2018-16463

First published: Tue Oct 30 2018(Updated: )

A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.

Credit: support@hackerone.com

Affected Software	Affected Version	How to fix
Nextcloud Server	<12.0.8
Nextcloud Server	>=13.0.0<13.0.3
Nextcloud Server	=14.0.0-beta1
Nextcloud Server	=14.0.0-beta2
Nextcloud Server	=14.0.0-beta3
Nextcloud Server	=14.0.0-beta4
Nextcloud Server	=14.0.0-rc1
Nextcloud Server	=14.0.0-rc2

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2018-16463?
CVE-2018-16463 has been categorized as a medium severity vulnerability.
How do I fix CVE-2018-16463?
To fix CVE-2018-16463, you should update your Nextcloud Server to version 14.0.0 or later, or to versions 13.0.3 and 12.0.8.
What applications are affected by CVE-2018-16463?
CVE-2018-16463 affects Nextcloud Server versions prior to 14.0.0, 13.0.3, and 12.0.8.
What vulnerabilities are associated with CVE-2018-16463?
CVE-2018-16463 is linked to session fixation vulnerabilities that may allow unauthorized access to password protected shares.
When was CVE-2018-16463 discovered?
CVE-2018-16463 was reported in 2018, reflecting vulnerabilities in earlier versions of Nextcloud Server.

agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/severity
agent/author
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/nextcloud
canonical/nextcloud server
version/nextcloud server/13.0.0
version/nextcloud server/14.0.0-beta1
version/nextcloud server/14.0.0-beta2
version/nextcloud server/14.0.0-beta3
version/nextcloud server/14.0.0-beta4
version/nextcloud server/14.0.0-rc1
version/nextcloud server/14.0.0-rc2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.