Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xh9q-q8cm-cwp3

Опубликовано: 15 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

CyberPower PowerPanel business application code contains a hard-coded JWT signing key. This could result in an attacker forging JWT tokens to bypass authentication.

CyberPower PowerPanel business application code contains a hard-coded JWT signing key. This could result in an attacker forging JWT tokens to bypass authentication.

EPSS

Процентиль: 10%
0.00035
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-259

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

CyberPower PowerPanel business application code contains a hard-coded JWT signing key. This could result in an attacker forging JWT tokens to bypass authentication.

EPSS

Процентиль: 10%
0.00035
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-259