CVE-2020-9049 victor Web Client and C•CURE Web Client JSON Web Token (JWT) Vulnerability

A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own JSON Web Token and use it to execute an HTTP API Method without the need for valid...

PT-2020-20462

Name of the Vulnerable Software and Affected Versions American Dynamics victor Web Client affected versions not specified Software House C•CURE Web Client affected versions not specified Description A vulnerability could allow an unauthenticated attacker on the network to create and sign their ow...

CVE-2020-9049: Improper Authorization

A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own JSON Web Token and use it to execute an HTTP API Method without the need for valid...