CVE-2020-5229

CVE-2020-5229 describes a critical vulnerability in Opencast versions prior to 8.1, where user passwords were stored using the cryptographically weak MD5 hashing algorithm, salted insecurely with usernames. This flaw allows an attacker, upon gaining database access, to potentially reconstruct user passwords, especially for common accounts like 'admin'. The vulnerability carries a CVSS score of 8.1 (HIGH), indicating a network-based attack with low complexity and high impact on confidentiality and integrity. While the vulnerability is significant, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or notable community discussion surrounding it.