Lucene search

K
cveMitreCVE-2018-16153
HistoryDec 12, 2023 - 5:15 p.m.

CVE-2018-16153

2023-12-1217:15:07
CWE-522
mitre
web.nvd.nist.gov
41
apereo opencast
security
cve-2018-16153
authentication
system digest credentials

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

25.8%

An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations.

Affected configurations

Nvd
Node
apereoopencastRange4.010.6
VendorProductVersionCPE
apereoopencast*cpe:2.3:a:apereo:opencast:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

25.8%

Related for CVE-2018-16153