CVE-2024-22401 - Vulnerability Details - OpenCVE

Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users could change the allowed list of apps, allowing them to use apps that were not intended to be used. It is recommended that the Guests app is upgraded to 2.4.1, 2.5.1 or 3.0.1. There are no known workarounds for this vulnerability.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Nextcloud	Guests

Configuration 1 [-]

OR	cpe:2.3:a:nextcloud:guests::::::::
	cpe:2.3:a:nextcloud:guests:2.5.0:::::::*
	cpe:2.3:a:nextcloud:guests:3.0.0:::::::*

No data.

References

Link	Providers
https://github.com/nextcloud/guests/pull/1082
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh
https://hackerone.com/reports/2250398

History

Mon, 21 Oct 2024 12:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-01-18T20:23:52.765Z

Updated: 2024-10-21T11:42:04.987Z

Reserved: 2024-01-10T15:09:55.547Z

Link: CVE-2024-22401

Vulnrichment

Updated: 2024-08-01T22:43:34.893Z

NVD

Status : Modified

Published: 2024-01-18T21:15:08.343

Modified: 2024-11-21T08:56:12.540

Link: CVE-2024-22401

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-22401", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-01-10T15:09:55.547Z", "datePublished": "2024-01-18T20:23:52.765Z", "dateUpdated": "2024-10-21T11:42:04.987Z"}, "containers": {"cna": {"title": "All users can reset the allowed apps list for Nextcloud Guest App users", "problemTypes": [{"descriptions": [{"cweId": "CWE-281", "lang": "en", "description": "CWE-281: Improper Preservation of Permissions", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh"}, {"name": "https://github.com/nextcloud/guests/pull/1082", "tags": ["x_refsource_MISC"], "url": "https://github.com/nextcloud/guests/pull/1082"}, {"name": "https://hackerone.com/reports/2250398", "tags": ["x_refsource_MISC"], "url": "https://hackerone.com/reports/2250398"}], "affected": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"version": ">= 2.4.0, < 2.4.1", "status": "affected"}, {"version": ">= 2.5.0, < 2.5.1", "status": "affected"}, {"version": ">= 3.0.0, < 3.0.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-01-18T20:23:52.765Z"}, "descriptions": [{"lang": "en", "value": "Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users could change the allowed list of apps, allowing them to use apps that were not intended to be used. It is recommended that the Guests app is upgraded to 2.4.1, 2.5.1 or 3.0.1. There are no known workarounds for this vulnerability."}], "source": {"advisory": "GHSA-wr87-hx3w-29hh", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:43:34.893Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh"}, {"name": "https://github.com/nextcloud/guests/pull/1082", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/nextcloud/guests/pull/1082"}, {"name": "https://hackerone.com/reports/2250398", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://hackerone.com/reports/2250398"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-01-22T15:12:49.328732Z", "id": "CVE-2024-22401", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-21T11:42:04.987Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh", "name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/nextcloud/guests/pull/1082", "name": "https://github.com/nextcloud/guests/pull/1082", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://hackerone.com/reports/2250398", "name": "https://hackerone.com/reports/2250398", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:43:34.893Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-22401", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-01-22T15:12:49.328732Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-21T11:41:58.256Z"}}], "cna": {"title": "All users can reset the allowed apps list for Nextcloud Guest App users", "source": {"advisory": "GHSA-wr87-hx3w-29hh", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"status": "affected", "version": ">= 2.4.0, < 2.4.1"}, {"status": "affected", "version": ">= 2.5.0, < 2.5.1"}, {"status": "affected", "version": ">= 3.0.0, < 3.0.1"}]}], "references": [{"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh", "name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/nextcloud/guests/pull/1082", "name": "https://github.com/nextcloud/guests/pull/1082", "tags": ["x_refsource_MISC"]}, {"url": "https://hackerone.com/reports/2250398", "name": "https://hackerone.com/reports/2250398", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users could change the allowed list of apps, allowing them to use apps that were not intended to be used. It is recommended that the Guests app is upgraded to 2.4.1, 2.5.1 or 3.0.1. There are no known workarounds for this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-281", "description": "CWE-281: Improper Preservation of Permissions"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-01-18T20:23:52.765Z"}}}, "cveMetadata": {"cveId": "CVE-2024-22401", "state": "PUBLISHED", "dateUpdated": "2024-10-21T11:42:04.987Z", "dateReserved": "2024-01-10T15:09:55.547Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-01-18T20:23:52.765Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nextcloud:guests:*:*:*:*:*:*:*:*", "matchCriteriaId": "96F65F1E-19D7-4B72-8618-A7D8BE0578E4", "versionEndExcluding": "2.4.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:nextcloud:guests:2.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "57F1277A-3A44-4CDF-AF3C-B8A5AE395549", "vulnerable": true}, {"criteria": "cpe:2.3:a:nextcloud:guests:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "F64336EF-9FEA-4DC2-B44A-70470D52632B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users could change the allowed list of apps, allowing them to use apps that were not intended to be used. It is recommended that the Guests app is upgraded to 2.4.1, 2.5.1 or 3.0.1. There are no known workarounds for this vulnerability."}, {"lang": "es", "value": "La aplicaci\u00f3n para invitados Nextcloud es una utilidad para crear usuarios invitados que solo pueden ver los archivos compartidos con ellos. En las versiones afectadas, los usuarios pod\u00edan cambiar la lista permitida de aplicaciones, permiti\u00e9ndoles usar aplicaciones que no estaban destinadas a ser utilizadas. Se recomienda actualizar la aplicaci\u00f3n Invitados a 2.4.1, 2.5.1 o 3.0.1. No se conocen workarounds para esta vulnerabilidad."}], "id": "CVE-2024-22401", "lastModified": "2024-11-21T08:56:12.540", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-01-18T21:15:08.343", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/nextcloud/guests/pull/1082"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh"}, {"source": "security-advisories@github.com", "tags": ["Permissions Required", "Third Party Advisory"], "url": "https://hackerone.com/reports/2250398"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/nextcloud/guests/pull/1082"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wr87-hx3w-29hh"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required", "Third Party Advisory"], "url": "https://hackerone.com/reports/2250398"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-281"}], "source": "security-advisories@github.com", "type": "Secondary"}]}