Skip to content
OpenAdvisories

Weakness (CWE)

CWE-344: Use of Invariant Value in Dynamically Changing Context

Base Draft

The product uses a constant value, name, or reference, but this value can (or should) vary across different environments.

Source: MITRE CWE-344

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2023-22746

    CKAN is vulnerable to session secret shared across instances using Docker images

    CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new container based on one of the Docker images listed below, the same secret key was being used by default. If the users didn't set a custom value vi…

    ckan ckan