CVE-2022-24885: Improper Authentication in Nextcloud Android Files
First published: Wed Apr 27 2022(Updated: )
Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.1, users can bypass a lock on the Nextcloud app on an Android device by repeatedly reopening the app. Version 3.19.1 contains a fix for the problem. There are currently no known workarounds.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nextcloud Nextcloud | <3.19.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Nextcloud Android app vulnerability?
The vulnerability ID for this Nextcloud Android app vulnerability is CVE-2022-24885.
What is the severity level of CVE-2022-24885?
The severity level of CVE-2022-24885 is low.
How can an attacker exploit CVE-2022-24885?
An attacker can exploit CVE-2022-24885 by repeatedly reopening the Nextcloud app on an Android device to bypass the lock.
What is the affected software of CVE-2022-24885?
The affected software of CVE-2022-24885 is Nextcloud Android app prior to version 3.19.1.
How can I fix CVE-2022-24885?
To fix CVE-2022-24885, update your Nextcloud Android app to version 3.19.1 or later.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/severity
- agent/remedy
- agent/title
- agent/author
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- vendor/nextcloud
- canonical/nextcloud nextcloud