Lucene search
+L

2 matches found

Positive Technologies
Positive Technologies
•added 2023/02/03 12:00 a.m.•8 views

PT-2023-18682

Name of the Vulnerable Software and Affected Versions CKAN versions affected versions not specified Description The issue concerns CKAN, an open-source data management system, where a default secret key is used across different instances when creating new containers based on specific Docker image...

8.6CVSS0.00693EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/03 12:00 a.m.•8 views

CVE-2023-22746: Use of Invariant Value in Dynamically Changing Context

CKAN is an open-source DMS data management system for powering data hubs and data portals. When creating a new container based on one of the Docker images listed below, the same secret key was being used by default. If the users didn't set a custom value via environment variables in the .env file...

8.6CVSS5.8AI score0.00693EPSS
SaveExploits0References3
Rows per page
Query Builder