PT-2024-9159 · Nextcloud+2 · Nextcloud Server+3

Tuyenee · Published 2024-09-26 · Updated 2025-02-01 · CVE-2024-52517

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 28.0.11 Nextcloud Server versions prior to 29.0.8 Nextcloud Server versions prior to 30.0.1 Nextcloud Enterprise Server versions prior to 25.0.13.13 Nextcloud Enterprise Server versions prior to 26.0.13.9 Nextcloud Enterprise Server versions prior to 27.1.11.9 Nextcloud Enterprise Server versions prior to 28.0.11 Nextcloud Enterprise Server versions prior to 29.0.8 Nextcloud Enterprise Server versions prior to 30.0.1

Description: The issue is related to insufficient protection of service data in Nextcloud Server and Nextcloud Enterprise Server, allowing an attacker with access to an active user session to read stored "Global credentials" in plain text. The API returns these credentials and adds them to the frontend, making them accessible.

Recommendations: Upgrade Nextcloud Server to version 28.0.11 Upgrade Nextcloud Server to version 29.0.8 Upgrade Nextcloud Server to version 30.0.1 Upgrade Nextcloud Enterprise Server to version 25.0.13.13 Upgrade Nextcloud Enterprise Server to version 26.0.13.9 Upgrade Nextcloud Enterprise Server to version 27.1.11.9 Upgrade Nextcloud Enterprise Server to version 28.0.11 Upgrade Nextcloud Enterprise Server to version 29.0.8 Upgrade Nextcloud Enterprise Server to version 30.0.1

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2025-1663

ALT-PU-2025-1855

ALT-PU-2025-2137

BDU:2024-10846

CVE-2024-52517

GHSA-X9Q3-C7F8-3RCG

Affected Products

Alt Linux

Nextcloud Enterprise Server

Nextcloud Server

Red Os

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/52xxx/CVE-2024-52517.json · Exploit
• https://github.com/nextcloud/server/commit/c45ed55f959ff54f3ea23dd2ae1a5868a075c9fe · Patch
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-x9q3-c7f8-3rcg · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-52517 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10846 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-52517 · Security Note
• https://github.com/nextcloud/server/pull/48359 · Note
• https://twitter.com/CVEnew/status/1857476928246034466 · Twitter Post
• https://twitter.com/Hossted_OSS/status/1878684312260022570 · Twitter Post
• https://redos.red-soft.ru/support/secure · Note
• https://t.me/cvedetector/11116 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nextcloud-031224 · Note
• https://hackerone.com/reports/2554079 · Note