Accessing to download.nextcloud.com from original ip adreess | insecure Download
N
Nextcloud
Submitted None
Actions:
Reported by
bb00x
Vulnerability Details
Technical details and impact analysis
Hi team ,
##Summary
I found that when I can access from original ip to the web site ,.This disable Https secure connection.
##Description
First I make DNS Lookup to find the ip adress
`download.nextcloud.com has address 88.198.160.133`
{F313820}
Now When I open The website from download.nextcloud.com I see it's over ssl so Can download securily .
{F313821}
But when I Enter 88.198.160.133 I also access the site so It's not secure to download .
{F313822}
Also this disable many protection when downloading .
## Impact
The user download your app over insecure connection.
Report Details
Additional information and metadata
State
Closed
Substate
Informative
Submitted
Weakness
Cleartext Transmission of Sensitive Information