CVE-2022-39334 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-39334 Interim 1 10 2025-12-23T02:46:49Z current 2022-11-29T00:48:42Z 2025-12-23T02:46:49Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-39334 Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack that exposes sensitive data or credentials to a network attacker. This affects the CLI only. It does not affect the standard GUI desktop Nextcloud clients, and it does not affect the Nextcloud server. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IHDC7NYZMDNIUM6KMGVNGTIO5AKPD4O7/ E-Mail link for openSUSE-SU-2023:0090-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MYOV4BMU2LQGVZ5NTYTI7BA3XMRNOCDF/ E-Mail link for openSUSE-SU-2023:0171-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Package Hub 15 SP4 SUSE Package Hub 15 SP5 openSUSE Leap 15.4 openSUSE Leap 15.5 caja-extension-nextcloud-3.8.0-bp154.2.3.1 caja-extension-nextcloud-3.8.0-bp155.2.3.1 cloudproviders-extension-nextcloud-3.8.0-bp154.2.3.1 cloudproviders-extension-nextcloud-3.8.0-bp155.2.3.1 libnextcloudsync-devel-3.8.0-bp154.2.3.1 libnextcloudsync-devel-3.8.0-bp155.2.3.1 libnextcloudsync0-3.8.0-bp154.2.3.1 libnextcloudsync0-3.8.0-bp155.2.3.1 nautilus-extension-nextcloud-3.8.0-bp154.2.3.1 nautilus-extension-nextcloud-3.8.0-bp155.2.3.1 nemo-extension-nextcloud-3.8.0-bp154.2.3.1 nemo-extension-nextcloud-3.8.0-bp155.2.3.1 nextcloud-desktop-3.8.0-bp154.2.3.1 nextcloud-desktop-3.8.0-bp155.2.3.1 nextcloud-desktop-doc-3.8.0-bp154.2.3.1 nextcloud-desktop-doc-3.8.0-bp155.2.3.1 nextcloud-desktop-dolphin-3.8.0-bp154.2.3.1 nextcloud-desktop-dolphin-3.8.0-bp155.2.3.1 nextcloud-desktop-lang-3.8.0-bp154.2.3.1 nextcloud-desktop-lang-3.8.0-bp155.2.3.1 caja-extension-nextcloud-3.8.0-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 cloudproviders-extension-nextcloud-3.8.0-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 libnextcloudsync-devel-3.8.0-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 libnextcloudsync0-3.8.0-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 nautilus-extension-nextcloud-3.8.0-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 nemo-extension-nextcloud-3.8.0-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 nextcloud-desktop-3.8.0-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 nextcloud-desktop-doc-3.8.0-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 nextcloud-desktop-dolphin-3.8.0-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 nextcloud-desktop-lang-3.8.0-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 caja-extension-nextcloud-3.8.0-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 cloudproviders-extension-nextcloud-3.8.0-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 libnextcloudsync-devel-3.8.0-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 libnextcloudsync0-3.8.0-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 nautilus-extension-nextcloud-3.8.0-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 nemo-extension-nextcloud-3.8.0-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 nextcloud-desktop-3.8.0-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 nextcloud-desktop-doc-3.8.0-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 nextcloud-desktop-dolphin-3.8.0-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 nextcloud-desktop-lang-3.8.0-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 caja-extension-nextcloud-3.8.0-bp154.2.3.1 as a component of openSUSE Leap 15.4 cloudproviders-extension-nextcloud-3.8.0-bp154.2.3.1 as a component of openSUSE Leap 15.4 libnextcloudsync-devel-3.8.0-bp154.2.3.1 as a component of openSUSE Leap 15.4 libnextcloudsync0-3.8.0-bp154.2.3.1 as a component of openSUSE Leap 15.4 nautilus-extension-nextcloud-3.8.0-bp154.2.3.1 as a component of openSUSE Leap 15.4 nemo-extension-nextcloud-3.8.0-bp154.2.3.1 as a component of openSUSE Leap 15.4 nextcloud-desktop-3.8.0-bp154.2.3.1 as a component of openSUSE Leap 15.4 nextcloud-desktop-doc-3.8.0-bp154.2.3.1 as a component of openSUSE Leap 15.4 nextcloud-desktop-dolphin-3.8.0-bp154.2.3.1 as a component of openSUSE Leap 15.4 nextcloud-desktop-lang-3.8.0-bp154.2.3.1 as a component of openSUSE Leap 15.4 caja-extension-nextcloud-3.8.0-bp155.2.3.1 as a component of openSUSE Leap 15.5 cloudproviders-extension-nextcloud-3.8.0-bp155.2.3.1 as a component of openSUSE Leap 15.5 libnextcloudsync-devel-3.8.0-bp155.2.3.1 as a component of openSUSE Leap 15.5 libnextcloudsync0-3.8.0-bp155.2.3.1 as a component of openSUSE Leap 15.5 nautilus-extension-nextcloud-3.8.0-bp155.2.3.1 as a component of openSUSE Leap 15.5 nemo-extension-nextcloud-3.8.0-bp155.2.3.1 as a component of openSUSE Leap 15.5 nextcloud-desktop-3.8.0-bp155.2.3.1 as a component of openSUSE Leap 15.5 nextcloud-desktop-doc-3.8.0-bp155.2.3.1 as a component of openSUSE Leap 15.5 nextcloud-desktop-dolphin-3.8.0-bp155.2.3.1 as a component of openSUSE Leap 15.5 nextcloud-desktop-lang-3.8.0-bp155.2.3.1 as a component of openSUSE Leap 15.5 Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack that exposes sensitive data or credentials to a network attacker. This affects the CLI only. It does not affect the standard GUI desktop Nextcloud clients, and it does not affect the Nextcloud server. CVE-2022-39334 SUSE Package Hub 15 SP4:caja-extension-nextcloud-3.8.0-bp154.2.3.1 SUSE Package Hub 15 SP4:cloudproviders-extension-nextcloud-3.8.0-bp154.2.3.1 SUSE Package Hub 15 SP4:libnextcloudsync-devel-3.8.0-bp154.2.3.1 SUSE Package Hub 15 SP4:libnextcloudsync0-3.8.0-bp154.2.3.1 SUSE Package Hub 15 SP4:nautilus-extension-nextcloud-3.8.0-bp154.2.3.1 SUSE Package Hub 15 SP4:nemo-extension-nextcloud-3.8.0-bp154.2.3.1 SUSE Package Hub 15 SP4:nextcloud-desktop-3.8.0-bp154.2.3.1 SUSE Package Hub 15 SP4:nextcloud-desktop-doc-3.8.0-bp154.2.3.1 SUSE Package Hub 15 SP4:nextcloud-desktop-dolphin-3.8.0-bp154.2.3.1 SUSE Package Hub 15 SP4:nextcloud-desktop-lang-3.8.0-bp154.2.3.1 SUSE Package Hub 15 SP5:caja-extension-nextcloud-3.8.0-bp155.2.3.1 SUSE Package Hub 15 SP5:cloudproviders-extension-nextcloud-3.8.0-bp155.2.3.1 SUSE Package Hub 15 SP5:libnextcloudsync-devel-3.8.0-bp155.2.3.1 SUSE Package Hub 15 SP5:libnextcloudsync0-3.8.0-bp155.2.3.1 SUSE Package Hub 15 SP5:nautilus-extension-nextcloud-3.8.0-bp155.2.3.1 SUSE Package Hub 15 SP5:nemo-extension-nextcloud-3.8.0-bp155.2.3.1 SUSE Package Hub 15 SP5:nextcloud-desktop-3.8.0-bp155.2.3.1 SUSE Package Hub 15 SP5:nextcloud-desktop-doc-3.8.0-bp155.2.3.1 SUSE Package Hub 15 SP5:nextcloud-desktop-dolphin-3.8.0-bp155.2.3.1 SUSE Package Hub 15 SP5:nextcloud-desktop-lang-3.8.0-bp155.2.3.1 openSUSE Leap 15.4:caja-extension-nextcloud-3.8.0-bp154.2.3.1 openSUSE Leap 15.4:cloudproviders-extension-nextcloud-3.8.0-bp154.2.3.1 openSUSE Leap 15.4:libnextcloudsync-devel-3.8.0-bp154.2.3.1 openSUSE Leap 15.4:libnextcloudsync0-3.8.0-bp154.2.3.1 openSUSE Leap 15.4:nautilus-extension-nextcloud-3.8.0-bp154.2.3.1 openSUSE Leap 15.4:nemo-extension-nextcloud-3.8.0-bp154.2.3.1 openSUSE Leap 15.4:nextcloud-desktop-3.8.0-bp154.2.3.1 openSUSE Leap 15.4:nextcloud-desktop-doc-3.8.0-bp154.2.3.1 openSUSE Leap 15.4:nextcloud-desktop-dolphin-3.8.0-bp154.2.3.1 openSUSE Leap 15.4:nextcloud-desktop-lang-3.8.0-bp154.2.3.1 openSUSE Leap 15.5:caja-extension-nextcloud-3.8.0-bp155.2.3.1 openSUSE Leap 15.5:cloudproviders-extension-nextcloud-3.8.0-bp155.2.3.1 openSUSE Leap 15.5:libnextcloudsync-devel-3.8.0-bp155.2.3.1 openSUSE Leap 15.5:libnextcloudsync0-3.8.0-bp155.2.3.1 openSUSE Leap 15.5:nautilus-extension-nextcloud-3.8.0-bp155.2.3.1 openSUSE Leap 15.5:nemo-extension-nextcloud-3.8.0-bp155.2.3.1 openSUSE Leap 15.5:nextcloud-desktop-3.8.0-bp155.2.3.1 openSUSE Leap 15.5:nextcloud-desktop-doc-3.8.0-bp155.2.3.1 openSUSE Leap 15.5:nextcloud-desktop-dolphin-3.8.0-bp155.2.3.1 openSUSE Leap 15.5:nextcloud-desktop-lang-3.8.0-bp155.2.3.1 moderate 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N