Security Advisory

CVE-2019-5885

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-03-19 17:59:29

Last updated 2024-08-04 20:09:23

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.

← Browse all CVEs View on cve.org ↗