Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.
cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*
00443127-F3B3-47FF-AC22-4B9BF23CCD4A
20.0.0
OR
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
A930E247-0B43-43CB-98FF-6CE7B8189835
OR
Hi,
Can i get informations about the algorithm used to hash password inside oc_credentials.

I think this is synchronous hash because nextcloud need it with external storage but i’m not sure ?


Best regards

Oc_credentials security?
This is a GitHub Issue
repo:server
owner:nextcloud
Title : Oc_credentials security?
Issue date:

--- start body ---
Hi,
Can i get informations about the algorithm used to hash password inside oc_credentials.

I think this is synchronous hash because nextcloud need it with external storage but i’m not sure ?


Best regards

--- end body ---

comments :
--- start comments ---

--- end comments ---