CVE-2021-32801: 
Linux openSUSE vulnerability analysis and mitigation

A vulnerability was identified in Nextcloud Server's Encryption-at-Rest functionality where exception logging could potentially expose sensitive key material. The issue affects Nextcloud Server versions prior to 20.0.12, 21.0.4, and 22.1.0 (GitHub Advisory).

The vulnerability (CVE-2021-32801) is classified as CWE-532, which relates to information exposure through log files. The issue occurs when exceptions are logged, potentially resulting in the exposure of sensitive encryption key material used for Nextcloud's Encryption-at-Rest functionality (GitHub Advisory).

The vulnerability could lead to the exposure of sensitive encryption key material through log files, potentially compromising the security of the Encryption-at-Rest functionality. However, this only affects users who have implemented the Encryption-at-Rest feature (GitHub Advisory).

The issue has been patched in Nextcloud Server versions 20.0.12, 21.0.4, and 22.1.0. Users are recommended to upgrade to these versions or newer. As a temporary workaround, users can disable logging, though this is not recommended as a long-term solution. Users not utilizing the Encryption-at-Rest functionality are not affected by this vulnerability (GitHub Advisory, GitHub PR).