CyberSecBulletin

Use of Invariant Value in Dynamically Changing Context

CWE-344

The product uses a constant value, name, or reference, but this value can (or should) vary across different environments.

We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 7.5.

Latest Use of Invariant Value in Dynamically Changing Context vulnerabilities

  • 7.5 High severity

    ckan: Use of Insufficiently Random Values

    CVE-2023-22746Ckan

    CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new container based on one of the Docker images listed below, the same secret key was being used by default. If the users didn't set a custom value via