An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations.
References
| Link | Resource |
|---|---|
| https://docs.opencast.org/r/10.x/admin/#changelog | Release Notes |
| https://github.com/advisories/GHSA-hcxx-mp6g-6gr9 | Third Party Advisory |
| https://github.com/opencast/opencast/commit/776d5588f39c61eb04c03bb955416c4f77629d51 | Patch |
| https://www.apereo.org/projects/opencast/news | Release Notes |
Configurations
History
14 Dec 2023, 20:30
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-522 | |
| CPE | cpe:2.3:a:apereo:opencast:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | () https://github.com/opencast/opencast/commit/776d5588f39c61eb04c03bb955416c4f77629d51 - Patch | |
| References | () https://www.apereo.org/projects/opencast/news - Release Notes | |
| References | () https://github.com/advisories/GHSA-hcxx-mp6g-6gr9 - Third Party Advisory | |
| References | () https://docs.opencast.org/r/10.x/admin/#changelog - Release Notes |
12 Dec 2023, 17:22
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-12 17:15
Updated : 2024-02-05 00:22
NVD link : CVE-2018-16153
Mitre link : CVE-2018-16153
CVE.ORG link : CVE-2018-16153
JSON object : View
Products Affected
apereo
- opencast
CWE
CWE-522
Insufficiently Protected Credentials