CVE-2020-8150: nextcloud nextcloud_server Cryptographic Issues
CVSS: 4.1v3.1MediumModified
Published 09-11-2020Last modified 04-08-2024
Vulnerability summary
CVE-2020-8150 is a medium (CVSS 4.1) Cryptographic Issues vulnerability in nextcloud nextcloud_server. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20.2% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
4.1/10
010
Medium · v3.1 (NVD)EPSS score
0.29%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Timeline
- 09-11-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the encryption scheme and break the integrity of encrypted files.
CVSS metrics
2 scores · 1 source · 2 versionsMedium 4.1Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:NSourcesSingle source
Low 1.9Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:N/I:P/A:NSourcesSingle source
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
0.00 pp
From 0.29% on 19-09-2026
19-09-202619-10-2026
EPSS score0.29%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (hackerone.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-310Cryptographic IssuesWeaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
- CWE-311Missing Encryption of Sensitive DataThe product does not encrypt sensitive or critical information before storage or transmission.
Affected systems
Nextcloud1 product
- nextcloud_server< 19.0.2
1 vendor · 1 product