Security Advisory

CVE-2022-25510

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-10 23:35:40
Last updated 2024-08-03 04:42:49
Assigner mitre
State PUBLISHED

Description

FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges.