[Bug 1178385] VUL-1: CVE-2020-8236: nextcloud: A wrong configuration incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it.

http://bugzilla.opensuse.org/show_bug.cgi?id=1178385 http://bugzilla.opensuse.org/show_bug.cgi?id=1178385#c1 Robert Frohl <rfrohl@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |INVALID --- Comment #1 from Robert Frohl <rfrohl@suse.com> --- not relevant, all opensuse versions ship nextcloud 20.0.0 -- You are receiving this mail because: You are on the CC list for the bug.