CVE-2019-5453: Medium severity nextcloud vulnerability
Published Jul 30, 2019
·Updated
Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider.
Affected Software
4 affected components
Nextcloud Nextcloud android<=3.2.4
Nextcloud Nextcloud android=3.3.0-rc1
Nextcloud Nextcloud android=3.3.0-rc2
Nextcloud Nextcloud android=3.3.0-rc3
Event History
Jul 30, 2019
CVE Published
via MITRE·08:30 PM
Data Sourced
via MITRE·08:30 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-5453?
CVE-2019-5453 is a vulnerability that allows bypassing lock protection in the Nextcloud Android app prior to version 3.3.0.
2
How can the Nextcloud Android app be affected by CVE-2019-5453?
The Nextcloud Android app versions up to 3.2.4, 3.3.0-rc1, 3.3.0-rc2, and 3.3.0-rc3 are affected by CVE-2019-5453.
3
What is the severity of CVE-2019-5453?
CVE-2019-5453 has a severity level of medium with a CVSS score of 6.1.
4
How can I access files bypassing lock protection in the Nextcloud Android app?
To access files bypassing lock protection in the Nextcloud Android app, you can switch to the Nextcloud file provider when prompted for lock protection.
5
How can I fix CVE-2019-5453 in the Nextcloud Android app?
To fix CVE-2019-5453 in the Nextcloud Android app, update to version 3.3.0 or higher.