Description (CNA)
An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.apereo.org/projects/opencast/news
- https://github.com/advisories/GHSA-hcxx-mp6g-6gr9
- https://github.com/opencast/opencast/commit/776d5588f39c61eb04c03bb955416c4f77629d51
- https://docs.opencast.org/r/10.x/admin/#changelog
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.