HexBrain

Nextcloud · Report #1195568

Ransomware protection is missing extentions

Validstatus
lowseverity
3upvotes
16 Jun 2021disclosed

How it was found

So again I'm not sure if this is in scope. However you do advertise this on your enterprise pages. So I assume so.

In any case. It seems your ransomeware_protection app is missing some common extentions. See for example https://avepointcdn.azureedge.net/assets/webhelp/compliance_guardian_installation_and_administration/index.htm#!Documents/ransomwareencryptedfileextensionlist.htm

As one example the 'pec' extention is not on your list.

Impact

It seems your ransomware list was last updated 6 months ago. There have been several ransom wares since.

However since you claim things like 'Best Ransomware protection in the industry' I would expect a lot more regular updates etc.

Long story short. This might deep your users safe while in reality this app is not really maintained and outdated.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original