← Database

CVE-2010-0554

HIGH CVSS: 7.5 Published: 2010-02-04 Modified: 2026-06-16

Description

The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack.

Affected Platforms

Geopp Geo\+\+ Gncaster

Weakness Type

CWE-287

References