CVE-2023-27172

2023-12-2000:00:00

mitre

www.cve.org

xpand it write-back manager

jwt

weak key

vulnerability

cve-2023-27172

bruteforce attack

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.6%

JSON

Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack.

References

balwurk.github.io/CVE-2023-27172/