description: Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the encryption keys.
problem types: Insufficiently Protected Credentials (CWE-522)
affected:
{
product: Nextcloud Server
vendor: n/a
versions:
status: affected, version: Fixed in 20.0.0
}