description: Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load.
problem types: Improper Authentication - Generic (CWE-287)
affected:
{
product: Nextcloud Server
vendor: n/a
versions:
status: affected, version: <14.0.0
}