Lucene search
K

132 matches found

Vulnrichment
Vulnrichment
added 2022/02/18 10:0 p.m.4 views

CVE-2022-23650 Use of Hard-coded Cryptographic Key in Netmaker

Netmaker is a platform for creating and managing virtual overlay networks using WireGuard. Prior to versions 0.8.5, 0.9.4, and 010.0, there is a hard-coded cryptographic key in the code base which can be exploited to run admin commands on a remote server if the exploiter know the address and...

7.2CVSS7.5AI score0.00804EPSS
Exploits0References4
NVD
NVD
added 2022/02/18 2:15 p.m.7 views

CVE-2022-0664

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1...

10CVSS0.00286EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/02/18 2:15 p.m.2 views

CVE-2022-0664

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1...

10CVSS7.6AI score0.00286EPSS
Exploits1References3
Prion
Prion
added 2022/02/18 2:15 p.m.11 views

Hardcoded credentials

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1...

10CVSS9.4AI score0.00286EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/02/18 2:0 p.m.13 views

CVE-2022-0664 Use of Hard-coded Cryptographic Key in gravitl/netmaker

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1...

8.8CVSS8.7AI score0.00286EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/02/18 2:0 p.m.14 views

CVE-2022-0664 Use of Hard-coded Cryptographic Key in gravitl/netmaker

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1...

8.8CVSS9.7AI score0.00286EPSS
Exploits1References2
CVE
CVE
added 2022/02/18 2:0 p.m.111 views

CVE-2022-0664

Summary: CVE-2022-0664 addresses a vulnerability inNetmaker where a hard-coded cryptographic key is used by the Go implementation (github.com/gravitl/netmaker) prior to versions 0.8.5, 0.9.4, 0.10.0, and 0.10.1. Affected software: Netmaker (Go component) on versions before the listed fixed releas...

10CVSS9.2AI score0.00286EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2022/02/18 12:0 a.m.2 views

Gravitl Netmaker 信任管理问题漏洞

Gravitl Netmaker is a platform for creating and managing fast, secure and dynamic virtual overlay networks using WireGuard from Gravitl USA. Used to create and control automated virtual networks, Gravitl Netmaker contains a security vulnerability that could be exploited by an attacker to run...

9CVSS5.7AI score0.00804EPSS
Exploits0References6
CNNVD
CNNVD
added 2022/02/18 12:0 a.m.17 views

Gravitl Netmaker 安全漏洞

Gravitl Netmaker is a platform for creating and managing fast, secure and dynamic virtual overlay networks using WireGuard from Gravitl USA. for creating and controlling automated virtual networks. Gravitl Netmaker has a security vulnerability that stems from the use of hard-coded encryption keys...

10CVSS7.8AI score0.00286EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/02/18 12:0 a.m.2 views

Gravitl Netmaker安全漏洞

Gravitl Netmaker is a platform for creating and managing fast, secure and dynamic virtual overlay networks using WireGuard from Gravitl USA. for creating and controlling automated virtual networks. Gravitl Netmaker has a security vulnerability that stems from the use of hard-coded encryption keys...

6.5CVSS6.5AI score0.00115EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/02/18 12:0 a.m.2 views

PT-2022-13342

Name of the Vulnerable Software and Affected Versions Netmaker versions prior to 0.8.5 Netmaker versions prior to 0.9.4 Netmaker versions prior to 0.10.0 Netmaker versions prior to 0.10.1 Description The issue is related to the use of a hard-coded cryptographic key in Netmaker. This could...

10CVSS7.3AI score0.00286EPSS
Exploits1References11
Huntr
Huntr
added 2022/02/10 10:32 p.m.29 views

in gravitl/netmaker

Description Netmaker is an applicaton that enable easly deployment of a mesh vpn based on Wiregaurd. To authenticate and manage users throughout the application, it is used JWT tokens. The secret key used to sign these tokens is hard-coded in the code, which means they can be faked. So, an attack...

10CVSS9.4AI score0.00286EPSS
Exploits1
Rows per page
Query Builder