vulnerability

SUSE: CVE-2020-8154: SUSE Linux Security Advisory

Severity
7
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:C)
Published
May 12, 2020
Added
May 24, 2020
Modified
May 24, 2020

Description

An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious request directly to the endpoint.

Solution

suse-upgrade-nextcloud
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.