description: A wrong configuration in Nextcloud Server 19.0.1 incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it.
problem types: Improper Authentication - Generic (CWE-287)
affected:
{
product: Nextcloud Server
vendor: n/a
versions:
status: affected, version: 19.0.2
}