PT-2022-20543 · Nextcloud+1 · Nextcloud Server+1

Nickvergessen · Published 2022-08-04 · Updated 2022-09-02 · CVE-2022-31120

Positive Technologies (AI Summary)

CVSS v3.1

2.1

Low

Base vector

AV:A/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 22.2.7 Nextcloud Server versions prior to 23.0.4 Nextcloud Server versions prior to 24.0.0

Description The issue concerns the audit log in Nextcloud Server, which is used to track actions but was not properly populated with federated share events. This incomplete logging could allow brute force attacks to go unnoticed, exacerbating the impact of related security issues.

Recommendations For versions prior to 22.2.7, upgrade to version 22.2.7 or later. For versions prior to 23.0.4, upgrade to version 23.0.4 or later. For versions prior to 24.0.0, upgrade to version 24.0.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-778

Related Identifiers

ALT-PU-2022-2504

ALT-PU-2022-2555

CVE-2022-31120

GHSA-9QVG-7FWG-722X

Affected Products

Alt Linux

Nextcloud Server

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31120.json · Exploit
• https://github.com/nextcloud/server/pull/31594/commits/1d8bf9a89c6856218802a1d365000a5831be8655 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-31120 · Security Note
• https://portal.nextcloud.com/article/using-the-audit-log-44.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31120 · Vendor Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-9qvg-7fwg-722x · Note
• https://t.me/cibsecurity/47563 · Telegram Post