Nextcloud 📱☁️💻
Follow

users should disconnect it from the internet until provides an update. A authentication bypass vulnerability has been found.

It is good to run a private cloud - but vendors really need to step up their security efforts...

securify.nl/advisory/SFY201801

@nextcloud hotfix released by Western Digital yesterday. Users should apply asap.

@nextcloud Notice how the researchers contacted WD on Apr 10. No response until publication on Sep 18 (after 5! months). Then fix 4 days after publication. I guess security is less important than bad publicity to #WesternDigital.

@nextcloud Bien contente d'avoir débranché le mien depuis l'annonce de la backdoor, pu aucune confiance dans ce parpaing !

Sign in to participate in the conversation
Mastodon

Generalistic and moderated instance. All opinions are welcome, but hate speeches are prohibited. Users who don't respect rules will be silenced or suspended, depending on the violation severity.