Lucene search
Veracode Vulnerability DatabaseVERACODE:22423HistoryJan 31, 2020 - 9:23 a.m.
Harded Coded Remember-Me Cookie
2020-01-3109:23:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
42.8%
Opencast uses a harded coded remember-me cookie. The remember-me cookie is created by hashing the username, password, and an additional system key, allowing anyone with an access to the remember-me token for one server to compromise all servers using the same credentials.
| CPE | Name | Operator | Version |
|---|---|---|---|
| opencast :: kernel | le | 7.5 |
Related
osv
osv
Hard-Coded Key Used For Remember-me Token in Opencast
2020-01-30 21:21:44
CVE-2020-5222
2020-01-30 21:15:14
nvd
nvd
CVE-2020-5222
2020-01-30 21:15:14
github
github
Hard-Coded Key Used For Remember-me Token in Opencast
2020-01-30 21:21:44
prion
prion
Default credentials
2020-01-30 21:15:00
cvelist
cvelist
CVE-2020-5222 Hard-Coded Key Used For Remember-me Token in OpenCast
2020-01-30 20:50:13
cve
cve
CVE-2020-5222
2020-01-30 21:15:14
openvas
openvas
Opencast < 7.6.0 and 8.0.0 Multiple Vulnerabilities
2020-02-04 00:00:00