CVE-2018-16153

CVE-2018-16153 describes a critical vulnerability in Apereo Opencast versions 4.x through 10.x prior to 10.6, where the system inadvertently transmits digest credentials during authentication attempts to arbitrary external services under specific conditions. This flaw carries a high CVSS score of 7.5, indicating a severe risk due to its network-based attack vector, low attack complexity, and potential for high confidentiality impact without requiring user interaction. While the vulnerability is significant, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or notable community discussion or media coverage, suggesting it has not garnered widespread attention.