Security Advisory
CVE-2019-5885
7.5
HIGH
Vulnerability Description
Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.
Published Date
March 21, 2019
Official Source
NIST NVD Advisory