Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-22249
HistoryMar 14, 2022 - 12:00 a.m.

FreeTakServer Trust Management Issue Vulnerability

2022-03-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

42.3%

FreeTAKServer is an open source lightweight server from the FreeTAKTeam team. It is used to connect to TAK clients. FreeTakServer suffers from a trust management issue vulnerability that stems from the fact that the Flask Secrets Key has three relevant locations that are hard-coded, which can be exploited by an attacker to create crafted cookies to bypass authentication or elevation of privileges.

CPENameOperatorVersion
freetakteam freetakservereq1.9.8

0.001 Low

EPSS

Percentile

42.3%