CVE-2025-59870

HCL MyXalytics is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk...

CVE-2024-48952

An issue was discovered in Logpoint before 7.5.0. SOAR uses a static JWT secret key to generate tokens that allow access to SOAR API endpoints without authentication. This static key vulnerability enables attackers to create custom JWT secret keys for unauthorized access to these endpoints...

CVE-2024-48952

CVE-2024-48952 affects Logpoint prior to 7.5.0. The issue arises from SOAR using a static JWT secret key to generate tokens, which can allow attackers to access SOAR API endpoints without authentication. This enables creation of custom JWT secret keys for unauthorized access. The Red Hat and PT S...