Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2022/05/25 7:34 p.m.•96 views

GHSA-7QCX-4P32-QCMX Missing Cryptographic Step in cassproject

Impact CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, which uses a method that expects e2e...

6.3CVSS6.6AI score0.0035EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2022/05/18 8:55 p.m.•37 views

CVE-2022-29229 Missing Cryptographic Step in cassproject

CaSS is a Competency and Skills System. CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, whic...

6.3CVSS7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•6 views

CVE-2022-29229: Missing Cryptographic Step

CaSS is a Competency and Skills System. CaSS Library, npm:cassproject has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalone username/password authentication, whic...

7.2CVSS7AI score0.0035EPSS
SaveExploits0References2
Rows per page
Query Builder