Lucene search
Veracode Vulnerability DatabaseVERACODE:22414HistoryJan 31, 2020 - 2:49 a.m.
Authorization Bypass
2020-01-3102:49:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
24.8%
opencast-kernel is vulnerable to authorization bypass. The vulnerability exists as a user with the non-standard role, ROLE_COURSE_ADMIN, is able to create new users using the user-utils endpoint.
| CPE | Name | Operator | Version |
|---|---|---|---|
| opencast :: kernel | le | 7.5 |
Related
osv
osv
CVE-2020-5231
2020-01-30 22:15:10
Users with ROLE_COURSE_ADMIN can create new users in Opencast
2020-01-30 21:21:37
github
github
Users with ROLE_COURSE_ADMIN can create new users in Opencast
2020-01-30 21:21:37
prion
prion
Default configuration
2020-01-30 22:15:00
cve
cve
CVE-2020-5231
2020-01-30 22:15:10
cvelist
cvelist
CVE-2020-5231 Opencast users with ROLE_COURSE_ADMIN can create new users
2020-01-30 21:15:16
nvd
nvd
CVE-2020-5231
2020-01-30 22:15:10
openvas
openvas
Opencast < 7.6.0 and 8.0.0 Multiple Vulnerabilities
2020-02-04 00:00:00