Lucene search
Veracode Vulnerability DatabaseVERACODE:34667HistoryMar 14, 2022 - 7:46 a.m.
Privilege Escalation
2022-03-1407:46:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
42.3%
freetakserver is vulnerable to privilege escalation. The vulnerability exists due to a hardcoded Flask secret key allowing an attacker to create crafted cookies to bypass authentication or escalate privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| freetakserver | le | 1.9.9 | |
| freetakserver | le | 1.9.9 |
Related
cvelist
cvelist
CVE-2022-25510
2022-03-10 23:35:40
nvd
nvd
CVE-2022-25510
2022-03-11 00:15:08
cnvd
cnvd
FreeTakServer Trust Management Issue Vulnerability
2022-03-14 00:00:00
prion
prion
Hardcoded credentials
2022-03-11 00:15:00
gitlab
gitlab
Hard coded credentials in FreeTAKServer
2022-03-12 00:00:00
github
github
Hard coded credentials in FreeTAKServer
2022-03-12 00:00:37
cve
cve
CVE-2022-25510
2022-03-11 00:15:08
osv
osv
Hard coded credentials in FreeTAKServer
2022-03-12 00:00:37
CVE-2022-25510
2022-03-11 00:15:08