Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the Register with a Provider flow.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Desktop | Nextcloud | * | 3.1.3 (excluding) |
| Nextcloud-desktop | Ubuntu | focal | * |
| Nextcloud-desktop | Ubuntu | groovy | * |
| Nextcloud-desktop | Ubuntu | hirsute | * |
| Nextcloud-desktop | Ubuntu | impish | * |
| Nextcloud-desktop | Ubuntu | kinetic | * |
| Nextcloud-desktop | Ubuntu | lunar | * |
| Nextcloud-desktop | Ubuntu | mantic | * |
| Nextcloud-desktop | Ubuntu | oracular | * |
| Nextcloud-desktop | Ubuntu | plucky | * |
| Nextcloud-desktop | Ubuntu | trusty | * |
| Nextcloud-desktop | Ubuntu | xenial | * |
Potential Mitigations
Related Attack Patterns
References
- https://github.com/nextcloud/desktop/pull/2926
- https://github.com/nextcloud/desktop/releases/tag/v3.1.3
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-qpgp-vf4p-wcw5
- https://hackerone.com/reports/903424
- https://www.debian.org/security/2021/dsa-4974
- https://github.com/nextcloud/desktop/pull/2926
- https://github.com/nextcloud/desktop/releases/tag/v3.1.3
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-qpgp-vf4p-wcw5
- https://hackerone.com/reports/903424
- https://www.debian.org/security/2021/dsa-4974