Lucene search

VulDBCVELIST:CVE-2020-36533

HistoryJun 03, 2022 - 7:10 p.m.

CVE-2020-36533 Klapp App JSON Web Token improper authentication

2022-06-0319:10:44

CWE-287

VulDB

www.cve.org

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

9.5 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.1%

JSON

A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handler. The manipulation leads to weak authentication. The attack may be initiated remotely.

CNA Affected

[
  {
    "product": "App",
    "vendor": "Klapp",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

vuldb.com/?id.160763

www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

9.5 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.1%

JSON

Related for CVELIST:CVE-2020-36533