Vulnerability Bulletins |
CVE-2019-5885 |
|
| Affected software | MATRIX SYNAPSE |
| Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2019-5885 | |