medium4.7
CVE-2021-32658
Nextcloud Android is the Android client for the Nextcloud open source home cloud system.
Impact
Nextcloud Android is the Android client for the Nextcloud open source home cloud system. Due to a timeout issue the Android client may not properly clean all sensitive data on account removal. This could include sensitive key material such as the End-to-End encryption keys. It is recommended that the Nextcloud Android App is upgraded to 3.16.1
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nextcloud | Nextcloud | before 3.16.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nextcloud/android/commit/355f3c745b464b741b20a3b96597303490c26333
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g5gf-rmhm-wpxw
- https://hackerone.com/reports/1189168
- https://github.com/nextcloud/android/commit/355f3c745b464b741b20a3b96597303490c26333
- https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g5gf-rmhm-wpxw
- https://hackerone.com/reports/1189168