CVE-2020-8228

A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.
Configurations

Configuration 1 (hide)

cpe:2.3:a:nextcloud:preferred_providers:1.7.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-10-05 14:15

Updated : 2024-02-04 21:23


NVD link : CVE-2020-8228

Mitre link : CVE-2020-8228

CVE.ORG link : CVE-2020-8228


JSON object : View

Products Affected

opensuse

  • leap
  • backports_sle

nextcloud

  • preferred_providers
CWE
CWE-307

Improper Restriction of Excessive Authentication Attempts

CWE-840

Business Logic Errors