Double free

Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently set series access. This allows for an easy denial...

CVE-2021-21318

CVE-2021-21318 affects Opencast up to version 9.1 (pre-9.2). Publishing an episode with strict access rules can overwrite the current series access, causing denial of access for all users and potentially exposing or hiding the series metadata. The vulnerability hinges on the publish/remove/re-pub...

CVE-2021-21318 Removing access may not effect published series

Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently set series access. This allows for an easy denial...

Opencast Access Control Error Vulnerability

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. An Access Control Error vulnerability exists in Opencast. The vulnerability stems from allowing the distribution of interludes with strict access rules wi...

Man-in-the-Middle (MitM)

opencast-kernel is vulnerable to man-in-the-middle attack. The hostname verification is disabled by default, allowing for man-in-the-middle attackers to intercept and modify network traffic...

Opencast < 7.9, 8.0 < 8.9 Hostname Verification Vulnerability

Opencast is prone to a hostname verification vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Man-in-the-Middle (MitM)

opencast-kernel is vulnerable to man-in-the-middle MitM. The vulnerability exists through the lack of hostname verification on the certificate when HTTPS connections are made...

CVE-2020-26234

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

CVE-2020-26234

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

Code injection

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

GHSA-44CW-P2HM-GPF6 Disabled Hostname Verification in Opencast

Opencast before version 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

Disabled Hostname Verification in Opencast

Opencast before version 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

CVE-2020-26234 Disabled Hostname Verification in OpenCast

Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for...

CVE-2020-26234

Opencast versions before 8.9 and 7.9 disable HTTPS hostname verification in its HTTP client, enabling potential MITM attacks. Root cause: hostname verification was disabled for a large portion of HTTP requests. Affected component/file: Opencast HTTP client. Impact: confidentiality/integrity conce...

Opencast Access Control Error Vulnerability

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. A security vulnerability exists in Opencast versions 8.9 and prior to 7.9 that stems from Opencast disabling HTTPS hostname validation, which is used by i...

Opencast Memory Corruption Vulnerability

Opencast is a free and open source video management solution that is scalable, customizable and low cost. Opencast memory corruption vulnerability, no detailed vulnerability details are provided at this time...

Opencast Encryption Issues Vulnerabilities

Opencast is a free and open source video management solution that is scalable, customizable and low cost. An encryption issue vulnerability exists in Opencast versions prior to 8.1 and prior to 7.6. The vulnerability stems from a network system or product that does not properly use the relevant...

Opencast Trust Management Issues Vulnerabilities

Opencast is a free and open source video management solution that is scalable, customizable and low cost. A trust management issue vulnerability exists in Opencast versions prior to 7.6 and prior to 8.1. The vulnerability stems from the lack of an effective trust management mechanism in a network...

Unspecified Vulnerability in Opencast

Opencast is a free and open source video management solution that is scalable, customizable and low cost. A security vulnerability exists in Opencast. The vulnerability stems from a lack of proper validation of user input data by a network system or product during the course of a user's input of ...

Opencast License Issue Vulnerability (CNVD-2020-12671)

Opencast is a free and open source video management solution that is scalable, customizable and low cost. An authorization issue vulnerability exists in Opencast versions prior to 7.6 and prior to 8.1. The vulnerability stems from a lack of authentication measures or insufficient authentication...