Lucene search

PRIOn knowledge basePRION:CVE-2022-35540

HistoryAug 18, 2022 - 11:15 p.m.

Hardcoded credentials

2022-08-1823:15:00

PRIOn knowledge base

www.prio-n.com

hardcoded credentials

agileconfig server

remote attackers

administrator access

jwt token

nvd

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.1%

Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.

CPENameOperatorVersion
agileconfiglt1.6.8

CPE	Name	Operator	Version
	agileconfig	lt	1.6.8

References

github.com/dotnetcore/AgileConfig/issues/91