22 matches found
CVE-2019-5885
Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...
7.5CVSS7.6AI score0.02418EPSS
SaveExploits0References4
CVE-2019-5885
Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...
7.5CVSS7.7AI score0.02418EPSS
SaveExploits0
20