CVE-2024-53356

Weak JWT Secret vulnerabilitiy in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as "somerandomaccesstoken". A weak HMAC secret poses a risk because attackers can use the...

CVE-2024-53356

creationtimestamp| type| source ---|---|--- 2025-01-31 22:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zkmadj32f 2025-01-31 23:25:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3698 2025-02-01 01:25:42+00:00| seen|...

CVE-2024-53356

EasyVirt DCScope (versions 8.6.0 and earlier) and CO2Scope (versions 1.3.0 and earlier) are vulnerable to privilege escalation due to a weak JWT secret . The underlying cause is a hardcoded HMAC secret ("somerandomaccesstoken") used for generating tokens. This flaw allows remote attackers to gene...