Vulnerability · Published Nov 15, 2024 · Assigned by GitHub_M

CVE-2024-52525Nextcloud Server User password is available in memory of the PHP process

Low 1.8

In plain English

A low-severity security flaw in security-advisories from nextcloud. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).

Severity (CVSS 3.1)1.8Low

Exploit odds (30 days)0.4%top 69.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Nextcloud Server is a self hosted personal cloud system. Under certain conditions the password of a user was stored unencrypted in the session data. The session data is encrypted before being saved in the session storage (Redis or disk), but it would allow a malicious process that gains access to the memory of the PHP process, to get access to the cleartext password of the user. It is recommended that the Nextcloud Server is upgraded to 28.0.12, 29.0.9 or 30.0.2.

Affected products (as reported)

Vendor	Product	Versions
nextcloud	security-advisories	>= 28.0.0, < 28.0.12>= 29.0.0, < 29.0.9>= 30.0.0, < 30.0.2

Weakness: CWE-312 · Vector: CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N

References

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-w7v5-mgxm-v6gm x_refsource_CONFIRM
https://github.com/nextcloud/server/pull/48915 x_refsource_MISC
https://github.com/nextcloud/server/commit/d25a0a2896a2a981939cacb8ee0d555feef22b3b x_refsource_MISC