The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file type of the shared file, which on Windows can also sometimes mean that a file depending on the type, e.g. "vbs", is being executed. It is recommended that the Nextcloud Desktop client is upgraded to version 3.6.1. As a workaround, users can block the Nextcloud Desktop client 3.6.0 by setting the `minimum.supported.desktop.version` system config to `3.6.1` on the server, so new files designed to use this attack vector are not downloaded anymore. Already existing files can still be used. Another workaround would be to enforce shares to be accepted by setting the `sharing.force_share_accept` system config to `true` on the server, so new files designed to use this attack vector are not downloaded anymore. Already existing shares can still be abused.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In     version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual     filesystem enabled and clicked a nc://open/ link it will open the default editor for the file type of the     shared file, which on Windows can also sometimes mean that a file depending on the type, e.g. vbs, is     being executed. It is recommended that the Nextcloud Desktop client is upgraded to version 3.6.1. As a     workaround, users can block the Nextcloud Desktop client 3.6.0 by setting the     `minimum.supported.desktop.version` system config to `3.6.1` on the server, so new files designed to use     this attack vector are not downloaded anymore. Already existing files can still be used. Another     workaround would be to enforce shares to be accepted by setting the `sharing.force_share_accept` system     config to `true` on the server, so new files designed to use this attack vector are not downloaded     anymore. Already existing shares can still be abused. (CVE-2022-41882)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In
    version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual
    filesystem enabled and clicked a nc://open/ link it will open the default editor for the file type of the
    shared file, which on Windows can also sometimes mean that a file depending on the type, e.g. "vbs", is
    being executed. It is recommended that the Nextcloud Desktop client is upgraded to version 3.6.1. As a
    workaround, users can block the Nextcloud Desktop client 3.6.0 by setting the
    `minimum.supported.desktop.version` system config to `3.6.1` on the server, so new files designed to use
    this attack vector are not downloaded anymore. Already existing files can still be used. Another
    workaround would be to enforce shares to be accepted by setting the `sharing.force_share_accept` system
    config to `true` on the server, so new files designed to use this attack vector are not downloaded
    anymore. Already existing shares can still be abused. (CVE-2022-41882)

  - Deck is a kanban style organization tool aimed at personal planning and project organization for teams
    integrated with Nextcloud. It is possible to make a user send any POST request with an arbitrary body
    given they click on a malicious deep link on a Windows computer. (e.g. in an email, chat link, etc). There
    are currently no known workarounds. It is recommended that the Nextcloud Desktop client is upgraded to
    3.6.2. (CVE-2023-22472)

ID	Name	Product	Family	Severity
224987	Linux Distros Unpatched Vulnerability : CVE-2022-41882	Nessus	Misc.	high
405728	Alpine: multiple nextcloud-client packages: security update to 3.6.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
405728	Alpine: multiple nextcloud-client packages: security update to 3.6.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2022-41882

high

Tenable Plugins

high

high

high