vulnerability
Debian: CVE-2022-39334: nextcloud-desktop -- security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:L/AC:M/Au:S/C:P/I:P/A:N) | Nov 25, 2022 | Jul 30, 2024 | Sep 19, 2025 |
Severity
3
CVSS
(AV:L/AC:M/Au:S/C:P/I:P/A:N)
Published
Nov 25, 2022
Added
Jul 30, 2024
Modified
Sep 19, 2025
Description
Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack that exposes sensitive data or credentials to a network attacker. This affects the CLI only. It does not affect the standard GUI desktop Nextcloud clients, and it does not affect the Nextcloud server.
Solutions
debian-upgrade-nextcloud-desktopno-fix-debian-deb-package
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.