Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vvwm-gcgm-h9j6

Опубликовано: 22 янв. 2022
Источник: github
Github: Не прошло ревью

Описание

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key. An attacker in possession of the key can issue valid JWTs and impersonate arbitrary users.

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key. An attacker in possession of the key can issue valid JWTs and impersonate arbitrary users.

EPSS

Процентиль: 14%
0.00045
Низкий

Дефекты

CWE-327

Связанные уязвимости

CVSS3: 5.9
nvd
около 4 лет назад

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key. An attacker in possession of the key can issue valid JWTs and impersonate arbitrary users.

EPSS

Процентиль: 14%
0.00045
Низкий

Дефекты

CWE-327