Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Airsonic 10.2.1 uses Spring's default remember-me mechanism based on MD5, with a fixed key of airsonic in GlobalSecurityConfig.java. An attacker able to capture cookies might be able to trivially bruteforce offline the passwords of associated users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Airsonic 信任管理问题漏洞
Vulnerability Description
Airsonic是一款基于网络的流媒体服务器。 Airsonic 10.2.1版本中存在安全漏洞。攻击者可利用该漏洞暴力破解密码。
CVSS Information
N/A
Vulnerability Type
N/A