1 matches found
Weak Cryptography
github.com/gravitl/netmaker is vulnerable to weak cryptography. The vulnerability exits in SetJWTSecret function of wts.go due to hard-coded secret key which allows an attacker to create a valid authentication token for any user and use it with admin privileges...
9.8CVSS3.4AI score0.01714EPSS
SaveExploits1References5Affected Software1
20