CVE-2021-32726: Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, webauthn tokens were not deleted after a user has been deleted. If a victim reus...

Summary

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, webauthn tokens were not deleted after a user has been deleted. If a victim reused an earlier used username, the previous user could gain access to their account. The issue was fixed ...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
nextcloud	nextcloud_server	< 19.0.13 >= 20.0.0, < 20.0.11 >= 21.0.0, < 21.0.3 `cpe:2.3:a:nextcloud:nextcloud_server::::::::`

Original advisory text

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, webauthn tokens were not deleted after a user has been deleted. If a victim reus...

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, webauthn tokens were not deleted after a user has been deleted. If a victim reused an earlier used username, the previous user could gain access to their account. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. There are no known workarounds.

References

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-6qr9-c... Third Party Advisory
https://github.com/nextcloud/server/pull/27532 Third Party Advisory
https://hackerone.com/reports/1202590 Permissions Required
https://security.gentoo.org/glsa/202208-17 Third Party Advisory