CVE-2020-26172

The CVE-2020-26172 issue affects tangro Business Workflow prior to v1.18.1, where every login generates the same JWT token, enabling reuse of an active session token because the token lacks an expiration timestamp. This is corroborated by multiple connected sources (Red Hat advisory and NVD recor...