CVE-2024-46958: Critical severity nextcloud desktop client vulnerability
Published Sep 16, 2024
·Updated
In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4.
Affected Software
2 affected components
All of the following
Nextcloud Desktop>=3.13.1<3.13.4
Linux Linux kernel
Remediation
Patch Available
Event History
Sep 16, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-46958?
CVE-2024-46958 is classified as a medium severity vulnerability affecting the Nextcloud Desktop Client due to improper file permissions.
2
How do I fix CVE-2024-46958?
To remediate CVE-2024-46958, upgrade the Nextcloud Desktop Client to version 3.13.4 or later.
3
Which versions are affected by CVE-2024-46958?
CVE-2024-46958 affects Nextcloud Desktop Client versions 3.13.1 through 3.13.3.
4
What platforms are impacted by CVE-2024-46958?
CVE-2024-46958 specifically impacts the Nextcloud Desktop Client on Linux.
5
What type of vulnerability is CVE-2024-46958?
CVE-2024-46958 is a file permissions vulnerability that can cause synchronized files to be world writable or world readable.