CVE-2020-8173: nextcloud nextcloud_server Cryptographic Issues
CVSS: 3.5v2.0LowModified
Published 30-10-2020Last modified 04-08-2024
Vulnerability summary
CVE-2020-8173 is a low (CVSS 3.5) Cryptographic Issues vulnerability in nextcloud nextcloud_server. EPSS estimates a 0.37% chance of exploitation in the next 30 days, higher than 29.3% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
3.5/10
010
Low · v2.0 (NVD)EPSS score
0.37%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Timeline
- 30-10-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended.
CVSS metrics
2 scores · 1 source · 2 versionsLow 2.2Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:NSourcesSingle source
Low 3.5Preferred score · NVD (NIST)
AV:N/AC:M/Au:S/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
0.37%
Chance of exploitation in the next 30 days
Percentile
29%
Versus all other CVEs
30-day change
0.00 pp
From 0.37% on 19-09-2026
19-09-202619-10-2026
EPSS score0.37%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (hackerone.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-310Cryptographic IssuesWeaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
- CWE-311Missing Encryption of Sensitive DataThe product does not encrypt sensitive or critical information before storage or transmission.
Affected systems
Nextcloud1 product
- nextcloud_server< 17.0.7 | ≥ 18.0.0, < 18.0.5
1 vendor · 1 product