← All advisories

Medium severity5.9NVD Advisory· Published Feb 4, 2020· Updated Jun 17, 2026

CVE-2019-15612

CVE-2019-15612

Description

A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Nextcloud/Nextcloudv5
Range: 15.0.3
Nextcloud/Nextcloud Enterprise Serverllm-fuzzy
Range: = 15.0.2
Nextcloud/Server
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
Range: >=13.0.0,<13.0.11

Patches

Vulnerability mechanics

References

2

hackerone.com/reports/486693nvdPermissions RequiredThird Party Advisory
nextcloud.com/security/advisory/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.