CVE-2018-3775

—

CVSS 3.1

8.8 high

EPSS

1%p67

Published

Aug 12, 2018 (Aug 12, 2018)

Modified

Jun 17, 2026

Description

Improper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obtained user credentials to bypass the 2 Factor Authentication.

Vendors: nextcloud
Products: nextcloud server
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.