CVE-2010-0554: The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all au...

Security readout for executives and security teams

Geo++ GNCASTER 1.4.0.7 and earlier reused the same HTTP authentication nonce, weakening session protection. A remote attacker could replay authentication material to hijack a web session or bypass authentication. No source in the bundle confirms active exploitation or a vendor fix. Exposure is most likely where Geo++ GNCASTER 1.4.0.7 or earlier is deployed and its web authentication interface is reachable by untrusted users or networks. The source bundle does not provide CPEs or broader affected product details. Treat this as a targeted legacy-product authentication risk. Prioritize if GNCASTER is exposed beyond trusted networks, because the impact is authentication bypass or session hijacking. If the product is absent or isolated, urgency is lower. Mitigation focus: Inventory GNCASTER deployments and confirm exact versions.; Check Geo++ vendor guidance for fixed versions or supported upgrade paths.; Limit GNCASTER HTTP access to trusted networks or VPN users..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.