Описание
Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions.
This issue affects Hitachi Coding Software Suite: through 3.3.0.
EPSS
Процентиль: 17%
0.00268
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-321
Связанные уязвимости
CVSS3: 9.8
github
2 дня назад
Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unauthorized Bearer tokens and exploit administrative functions. This issue affects Hitachi Coding Software Suite: through 3.3.0.
EPSS
Процентиль: 17%
0.00268
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-321