CVE-2020-5206

CVE-2020-5206 describes a critical authentication bypass vulnerability in Opencast versions prior to 7.6 and 8.1. An attacker can exploit this flaw by crafting a "remember-me" cookie with an arbitrary username, allowing them to impersonate any user, including the global system administrator, and access non-public content without proper authentication. This vulnerability carries a CVSS score of 10.0 (Critical) due to its network-based attack vector, low complexity, and high impact on confidentiality and integrity. While no active exploitation, public exploit code, or significant community discussion has been observed, the high FAUCET Risk Score of 80/100 indicates a significant potential threat.