Test ID:	1.3.6.1.4.1.25623.1.0.106707
Category:	Web application abuses
Title:	Nextcloud Authorization Check Vulnerability - Linux
Summary:	Nextcloud is prone to an improper authorization check vulnerability on;removing shares
Description:	Summary: Nextcloud is prone to an improper authorization check vulnerability on removing shares Vulnerability Insight: The Sharing Backend as implemented in Nextcloud does differentiate between shares to users and groups. In case of a received group share, users should be able to unshare the file to themselves but not to the whole group. Affected Software/OS: Nextcloud Server prior to 9.0.54 Solution: Update 9.0.54 or later versions. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9464 BugTraq ID: 97287 http://www.securityfocus.com/bid/97287 https://github.com/nextcloud/server/commit/3387e5d00fcf6b2ea6b285a091e5743f545e7202 https://github.com/nextcloud/server/commit/7289cb5ec0b812992ab0dfb889744b94bc0994f0 https://github.com/nextcloud/server/commit/a5471b4a3e3f30e99e4de39c97c0c3b3c2f1618f https://github.com/nextcloud/server/commit/e2c4f4f9aa11bc92e8f2212cce73841b922187e8 https://hackerone.com/reports/153905 https://nextcloud.com/security/advisory/?id=nc-sa-2016-007
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.