CVE-2019-15621: Medium severity nextcloud server vulnerability
Published Feb 4, 2020
·Updated
Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link.
Affected Software
3 affected components
Nextcloud Server<14.0.13
Nextcloud Server>=15.0.0<15.0.9
Nextcloud Server>=16.0.0<16.0.2
Event History
Feb 4, 2020
CVE Published
via MITRE·07:08 PM
Data Sourced
via MITRE·07:08 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-15621?
CVE-2019-15621 has a medium severity level due to improper permissions allowing unauthorized reshare capabilities.
2
How do I fix CVE-2019-15621?
To fix CVE-2019-15621, upgrade your Nextcloud Server to version 16.0.2 or later.
3
What are the affected versions in CVE-2019-15621?
CVE-2019-15621 affects Nextcloud Server versions prior to 16.0.2, as well as versions 15.0.0 to 15.0.9 and 14.0.13 and earlier.
4
What type of vulnerability is CVE-2019-15621?
CVE-2019-15621 is classified as an improper permissions vulnerability.
5
Who is impacted by CVE-2019-15621?
Users of Nextcloud Server versions that are prior to the patched releases are impacted by CVE-2019-15621.