6 matches found
CVE-2022-35540
Hardcoded JWT Secret in AgileConfig 1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access...
CVE-2022-35540
creationtimestamp| type| source ---|---|--- 2022-08-19 02:23:12+00:00| seen| https://t.me/cibsecurity/48421...
CVE-2022-35540
Hardcoded JWT Secret in AgileConfig 1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access...
CVE-2022-35540
CVE-2022-35540 concerns AgileConfig prior to 1.6.8 where a hard-coded JWT secret in the server enables remote attackers to forge a token and gain administrator access. The issue, documented across multiple sources (Red Hat, GHSA, OSV, NVD), attributes the root cause to an inline secret, allowing ...
