description: A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet.
problem types: Improper Access Control - Generic (CWE-284)
affected:
{
product: Nextcloud Server
vendor: n/a
versions:
status: affected, version: Fixed in 20.0.6
}