high7.5
CVE-2018-16153
An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6.
Impact
An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apereo | Opencast | from 4.0 before 10.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.opencast.org/r/10.x/admin/#changelog
- https://github.com/advisories/GHSA-hcxx-mp6g-6gr9
- https://github.com/opencast/opencast/commit/776d5588f39c61eb04c03bb955416c4f77629d51
- https://www.apereo.org/projects/opencast/news
- https://docs.opencast.org/r/10.x/admin/#changelog
- https://github.com/advisories/GHSA-hcxx-mp6g-6gr9
- https://github.com/opencast/opencast/commit/776d5588f39c61eb04c03bb955416c4f77629d51
- https://www.apereo.org/projects/opencast/news