22 matches found
UBUNTU-CVE-2019-5885
Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...
7.5CVSS7.2AI score0.02438EPSS
SaveExploits0References4
PYSEC-2019-187
Matrix Synapse before 0.34.0.1, when the macaroonsecretkey authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users...
7.5CVSS7.1AI score0.02438EPSS
SaveExploits0References5Affected Software1
20