PT-2023-2468 · Nextcloud+2 · Nextcloud Server+2

Nickvergessen · Publicado 2023-03-27 · Atualizado 2023-04-18 · CVE-2023-28835

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 24.0.10 Nextcloud Server versions prior to 25.0.4

Description The issue is related to the generated fallback password when creating a share in Nextcloud Server, which uses a weak complexity random number generator. This makes the password guessable to an attacker willing to brute force it, especially when the sharer does not change the password. The vulnerability can be exploited by a remote attacker to gain unauthorized access to protected information. It only affects users who do not have a password policy enabled.

Recommendations For Nextcloud Server versions prior to 24.0.10, upgrade to 24.0.10. For Nextcloud Server versions prior to 25.0.4, upgrade to 25.0.4. As a temporary workaround for users unable to upgrade, enable a password policy to mitigate the issue.

Exploit

Correção

Unrestricted File Upload

OS Command Injection

Path traversal

Resource Exhaustion

Enumeração de Fraquezas

CWE-434

CWE-78

CWE-22

CWE-400

CWE-338

Identificadores relacionados

ALT-PU-2023-1517

ALT-PU-2023-1547

BDU:2023-02258

BDU:2023-02259

BDU:2023-02260

BDU:2023-02262

CVE-2023-28835

GHSA-7W2P-RP9M-9XP9

Produtos afetados

Alt Linux

Nextcloud Server

Red Os

Referências · 22

• 🔥 https://github.com/rapid7/metasploit-framework/commit/c598d8b4b00581ff801cdcb3e79f8de056adf6b8 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28835.json · Exploit
• https://github.com/nextcloud/server/pull/36093 · Correção
• https://github.com/nextcloud/server/pull/36095 · Nota
• https://github.com/nextcloud/server/commit/5a06b50b10cc9278bbe68bbf897a0c4aeb0c4e60 · Nota
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7w2p-rp9m-9xp9 · Aviso do Fabricante
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9wmj-gp8v-477j · Nota
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h3c9-cmh8-7qpj · Nota
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-ch7f-px7m-hg25 · Nota
• https://t.me/cibsecurity/61197 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-28644 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-02262 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-28835 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-28835 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-02258 · Nota de Segurança