description: Improper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obtained user credentials to bypass the 2 Factor Authentication.
problem types: Improper Authentication - Generic (CWE-287)
affected:
{
product: Nextcloud Server
vendor: HackerOne
versions:
status: affected, version: <12.0.3
}