PT-2022-20542 · Nextcloud · Nextcloud Mail

Nickvergessen · Published 2022-08-04 · Updated 2022-08-10 · CVE-2022-31119

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Mail versions prior to 1.12.1

Description The issue affects Nextcloud Mail, an email application for the Nextcloud personal cloud product. In the event of a misconfiguration, affected versions of Nextcloud Mail would log user passwords to disk. If an attacker gains access to these logs, they could obtain complete access to the affected accounts.

Recommendations For versions prior to 1.12.1, upgrade Nextcloud Mail to version 1.12.1. Inspect logs and remove any passwords that have been logged due to misconfiguration. As a temporary measure, consider closely monitoring log access to minimize the risk of exploitation.

Exploit

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2022-31119

GHSA-63M3-W68H-3WJG

Affected Products

Nextcloud Mail

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31119.json · Exploit
• https://github.com/nextcloud/mail/pull/6488/commits/ab9ade57fbc1f465ffe905248f93f328d638d7e5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-31119 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31119 · Vendor Advisory
• https://github.com/nextcloud/mail/issues/823 · Note
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-63m3-w68h-3wjg · Note
• https://t.me/cibsecurity/47567 · Telegram Post