← All advisories

Medium severity6.7NVD Advisory· Published Mar 3, 2021· Updated Jun 17, 2026

CVE-2020-8296

CVE-2020-8296

Description

Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Nextcloud/Server2 versions
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*range: <20.0.0
- (no CPE)range: <20.0.0
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Nextcloud/Nextcloudllm-fuzzy2 versions
<20.0.0+ 1 more
- (no CPE)range: <20.0.0
- (no CPE)range: Fixed in 20.0.0

Patches

Vulnerability mechanics

References

5

github.com/nextcloud/server/pull/21037nvdPatchThird Party Advisory
github.com/nextcloud/server/issues/17439nvdExploitThird Party Advisory
hackerone.com/reports/867164nvdExploitIssue TrackingThird Party Advisory
nextcloud.com/security/advisory/nvdVendor Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L6BO6P6MP2MOWA6PZRXX32PLWPXN5O4S/nvd

News mentions

0

No linked articles in our index yet.