Bypass Lock Protection in Nextcloud Android App

CVE-2019-5452

What is CVE-2019-5452?

A security flaw in the Nextcloud Android app allows attackers to bypass lock protection mechanisms, resulting in unintentional leakage of sensitive thumbnail images. This issue arises when the Android content provider is accessed despite the device being secured, exposing potential confidential information to unauthorized parties. Users should update to version 3.6.2 or later to mitigate this risk.

References