EUVD-2014-9832

A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the component Flask Secret Key Handler. Such manipulation leads to use of hard-coded cryptographic key . The attack may be performed from remote. Upgrading to version 1.11.1 is able to address...

CVE-2014-125135 OctoPrint Flask Secret Key hard-coded key

A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the component Flask Secret Key Handler. Such manipulation leads to use of hard-coded cryptographic key . The attack may be performed from remote. Upgrading to version 1.11.1 is able to address...

CVE-2014-125135

OctoPrint versions 1.0.0 and 1.1.0 are vulnerable to a remote attack due to a hard-coded cryptographic key within the Flask Secret Key Handler component. This vulnerability, identified as CWE-321 and CWE-320 , allows for the use of a static key for cryptographic operations. Remediation is availab...