Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-33371
HistoryAug 03, 2023 - 1:15 a.m.

Authentication flaw

2023-08-0301:15:00
PRIOn knowledge base
www.prio-n.com
3
authentication
flaw
cryptographic key
jwt
session tokens
attackers
bypass

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session tokens, allowing attackers to sign arbitrary session tokens and bypass authentication.

CPENameOperatorVersion
control_id_idsecurele4.7.26.0

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

Related for PRION:CVE-2023-33371