CVE-2023-28646

Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. In versions from 3.7.0 and before 3.24.1 an attacker that has access to the unlocked physical device can bypass the Nextcloud Android Pin/passcode protection via a thirdparty app. This allows to see meta information like sharer, sharees and activity of files. It is recommended that the Nextcloud Android app is upgraded to 3.24.1. There are no known workarounds for this vulnerability.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.3 / Impact : 3.7

Attack Vector PHYSICAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://github.com/nextcloud/android/pull/11242	Issue Tracking Patch
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3rf-94h6-vj8v	Vendor Advisory
https://github.com/nextcloud/android/pull/11242	Issue Tracking Patch
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3rf-94h6-vj8v	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:*:android:*:*

History

21 Nov 2024, 07:55

Type	Values Removed	Values Added
References	~~() https://github.com/nextcloud/android/pull/11242 - Issue Tracking, Patch~~	() https://github.com/nextcloud/android/pull/11242 - Issue Tracking, Patch
References	~~() https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3rf-94h6-vj8v - Vendor Advisory~~	() https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3rf-94h6-vj8v - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~2.4~~	v2 : unknown v3 : 4.4

Information

Published : 2023-03-30 19:15

Updated : 2024-11-21 07:55

NVD link : CVE-2023-28646

Mitre link : CVE-2023-28646

CVE.ORG link : CVE-2023-28646

JSON object : View

Products Affected

nextcloud

nextcloud

CWE

CWE-281

Improper Preservation of Permissions

CWE-287

Improper Authentication

NVD-CWE-noinfo

{"id": "CVE-2023-28646", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 0.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.4, "attackVector": "PHYSICAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 0.9}]}, "published": "2023-03-30T19:15:06.767", "references": [{"url": "https://github.com/nextcloud/android/pull/11242", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3rf-94h6-vj8v", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nextcloud/android/pull/11242", "tags": ["Issue Tracking", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3rf-94h6-vj8v", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-281"}, {"lang": "en", "value": "CWE-287"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. In versions from 3.7.0 and before 3.24.1 an attacker that has access to the unlocked physical device can bypass the Nextcloud Android Pin/passcode protection via a thirdparty app. This allows to see meta information like sharer, sharees and activity of files. It is recommended that the Nextcloud Android app is upgraded to 3.24.1. There are no known workarounds for this vulnerability."}], "lastModified": "2024-11-21T07:55:43.973", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nextcloud:nextcloud:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "4E06B4DB-C2C3-40A2-AD87-6128530FAA61", "versionEndExcluding": "3.24.1", "versionStartIncluding": "3.7.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}