CVE-2018-16153

    Dashboard / Vulnerabilities / CVE-2018-16153

    CVE-2018-16153

    Published: 12 Dec 2023Last Modified: 20 Oct 2026

    Summary:

    Details: An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations.

    References: https://docs.opencast.org/r/10.x/admin/#changelog, https://github.com/advisories/GHSA-hcxx-mp6g-6gr9, https://www.apereo.org/projects/opencast/news, https://github.com/opencast/opencast/commit/776d5588f39c61eb04c03bb955416c4f77629d51

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 77e712ad3fbdc390edeeccfb170b02d28247723e
    Fixed -5178b6bdabd5e63d727bbf10fca8dc0dfbdebb35

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2018-16153 | CVE-DB