2 matches found
CVE-2010-3852
The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses "INSERT SECRET HERE" as its secret key for cookies, which makes it easier for remote attackers to bypass repoze.who authentication via a forged ticket cookie...
6.4CVSS6.6AI score0.02002EPSS
SaveExploits0References12
CVE-2010-3852: Improper Authentication
The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses "INSERT SECRET HERE" as its secret key for cookies, which makes it easier for remote attackers to bypass repoze.who authentication via a forged ticket cookie...
6.4CVSS5.8AI score0.02002EPSS
SaveExploits0References2
20