1. Home
  2. CVE Database
  3. CVE-2019-5453
MEDIUM · 6.1

CVE-2019-5453

Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider.

Vulnerability Description

Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
NextcloudNextcloud<= 3.2.4

Related Weaknesses (CWE)

CWE-287CWE-288

References

FAQ

What is CVE-2019-5453?

CVE-2019-5453 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider.

How severe is CVE-2019-5453?

CVE-2019-5453 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-5453?

Check the references section above for vendor advisories and patch information. Affected products include: Nextcloud Nextcloud.