Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1188: Initialization of a Resource with an Insecure Default

Base Incomplete

The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.

Source: MITRE CWE-1188

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.9
    CVE-2023-27524 Exploited Public exploit EPSS 98%

    Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

    Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resour…

    Apache Software Foundation Apache Superset apache-superset PyPI
    KEV Jan 8, 2024