CVE-2020-8236

MEDIUM · CVSS 6.8 EPSS 0.59%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-8236

Severity

MEDIUM

CVSS

6.8

EPSS

0.59%

Original NVD Description

A wrong configuration in Nextcloud Server 19.0.1 incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it.