CVE-2019-15615: 
NixOS vulnerability analysis and mitigation

A vulnerability was discovered in the Nextcloud Android App version 3.9.0 that allows bypass of the lock protection mechanism. The vulnerability (CVE-2019-15615) was related to an incorrect system time check that could be exploited by changing the device time to a past date (NVD).

The vulnerability has a CVSS v3.1 base score of 6.1 (Medium) with the vector string CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. The weakness is classified as CWE-287 (Improper Authentication) and CWE-284 (Improper Access Control). The vulnerability specifically involves a flawed validation of system time that could be manipulated to circumvent the app's lock protection (NVD).

If exploited, this vulnerability allows an attacker with physical access to the device to bypass the lock protection mechanism of the Nextcloud Android App by manipulating the system time. This could lead to unauthorized access to sensitive information stored within the app (NVD).

The vulnerability was addressed in a security advisory (NC-SA-2020-004) by Nextcloud. Users should update their Nextcloud Android App to a version newer than 3.9.0 to protect against this vulnerability (Nextcloud Advisory).