CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2021/09/03 2:15 a.m.•35 views

CVE-2021-40494

A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system...

10CVSS0.01702EPSS

Exploits0References1

OSV•added 2021/09/03 2:15 a.m.•21 views

CVE-2021-40494

A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system...

9.8CVSS9.6AI score

Exploits0References1

ATTACKERKB•added 2021/09/03 2:15 a.m.•4 views

CVE-2021-40494

A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system...

10CVSS6.9AI score0.01702EPSS

Exploits0References2

CVE•added 2021/09/03 1:35 a.m.•67 views

CVE-2021-40494

CVE-2021-40494 (AdaptiveScale LXDUI) is caused by a hardcoded JWT secret key in metadata.py, affecting AdaptiveScale LXDUI up to version 2.1.3. This secret enables an attacker to obtain admin-level access to the host system. Multiple connected sources corroborate the issue (GHSA, Veracode, OSV, N...

10CVSS9.4AI score0.01702EPSS

Exploits0References1Affected Software1