Loading HuntDB...

Accessing to download.nextcloud.com from original ip adreess | insecure Download

N
Nextcloud
Submitted None
Reported by bb00x

Vulnerability Details

Technical details and impact analysis

Cleartext Transmission of Sensitive Information
Hi team , ##Summary I found that when I can access from original ip to the web site ,.This disable Https secure connection. ##Description First I make DNS Lookup to find the ip adress `download.nextcloud.com has address 88.198.160.133` {F313820} Now When I open The website from download.nextcloud.com I see it's over ssl so Can download securily . {F313821} But when I Enter 88.198.160.133 I also access the site so It's not secure to download . {F313822} Also this disable many protection when downloading . ## Impact The user download your app over insecure connection.

Report Details

Additional information and metadata

State

Closed

Substate

Informative

Submitted

Weakness

Cleartext Transmission of Sensitive Information