Lucene search
+L

1 matches found

Veracode
Veracode
added 2022/02/21 8:32 a.m.19 views

Weak Cryptography

github.com/gravitl/netmaker is vulnerable to weak cryptography. The vulnerability exits in SetJWTSecret function of wts.go due to hard-coded secret key which allows an attacker to create a valid authentication token for any user and use it with admin privileges...

9.8CVSS3.4AI score0.01714EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder