PT-2022-20541 · Nextcloud+1 · Nextcloud Server+1

Nickvergessen · Published 2022-08-04 · Updated 2022-09-02 · CVE-2022-31118

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 22.2.9 Nextcloud Server versions prior to 23.0.6 Nextcloud Server versions prior to 24.0.2

Description The issue affects Nextcloud server, an open source personal cloud solution. An attacker could brute force to find if federated sharing is being used and potentially try to brute force access tokens for federated shares, which are 15 characters long and contain a-zA-Z0-9.

Recommendations For versions prior to 22.2.9, upgrade to 22.2.9. For versions prior to 23.0.6, upgrade to 23.0.6. For versions prior to 24.0.2, upgrade to 24.0.2. As a temporary workaround, users unable to upgrade may disable federated sharing via the Admin Sharing settings in "index.php/settings/admin/sharing".

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Allocation of Resources Without Limits

Weakness Enumeration

CWE-307

CWE-770

Related Identifiers

ALT-PU-2022-2504

ALT-PU-2022-2555

CVE-2022-31118

GHSA-2VWH-5V93-3VCQ

Affected Products

Alt Linux

Nextcloud Server

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31118.json · Exploit
• https://github.com/nextcloud/server/pull/32843/commits/6eb692da7fe73c899cb6a8d2aa045eddb1f14018 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-31118 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31118 · Vendor Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2vwh-5v93-3vcq · Note
• https://t.me/cibsecurity/47563 · Telegram Post
• https://t.me/cibsecurity/47561 · Telegram Post