CVE-2022-22845-Exploit

CVE-2022-22845-Exploit CVE-2022-22845 익스플로잇 - QXIP SIPCAPTURE Homer-App 1.4.27까지의 인증되지 않은 관리자 탈취 발견: Omri Baso & Fabien Aunay 익스플로잇 제작자: Omri Baso...

CVE-2022-22845

QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different customers' installations...

CVE-2022-22845

QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different customers' installations...

CVE-2022-22845

QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different customers' installations...

CVE-2022-22845

QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different customers' installations...

CVE-2022-22845

CVE-2022-22845 affects QXIP SIPCAPTURE homer-app (HOMER 7.x) before 1.4.28. Reported issue: the JWT secret key 167f0db2-f83e-4baa-9736-d56064a5b415 is reused across different customer installations, enabling insecure session handling. Impact described as high severity with potential unauthorized ...