CVEs-PoC/2019/CVE-2019-5455.md

### [CVE-2019-5455](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5455)
![](https://img.shields.io/static/v1?label=Product&message=com.nextcloud.client&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=3.6.1%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Authentication%20Bypass%20Using%20an%20Alternate%20Path%20or%20Channel%20(CWE-288)&color=brightgreen)

### Description

Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process.

### POC

#### Reference
- https://hackerone.com/reports/490946

#### Github
No PoCs found on GitHub currently.