FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges.
{ "nvd_published_at": "2022-03-11T00:15:00Z", "cwe_ids": [ "CWE-798" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-03-14T23:16:48Z" }