Vulnetix
Try Vulnetix Request Demo
CVE-2020-8228 PUBLISHED CVSS 5.300000190734863 MEDIUM

A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.

EPSS 0.45% · 63.5th percentile

Risk Scores

CVSS v3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.45%
63.5th percentile

Affected Products

VendorProductVersions
opensuseleap15.1, 15.2
nextcloudpreferred_providers1.7.0
n/aNextcloud Preferred ProviderFixed in 1.8.0
opensusebackports_sle15.0, 15.0

Timeline

References

Open in Interactive Console →