CVE-2018-0114

CVE-2018-0114 prima di 0.11.0 un aggressore remoto non autenticato può firmare nuovamente un token utilizzando una chiave incorporata al suo interno. https://www.cvedetails.com/cve/CVE-2018-0114/...

CVE-2018-0114

CVE-2018-0114 Exploit für Node-jose 0.11.0 geschrieben in Ruby Verwendung Geben Sie einfach den Namen des Opfers in den Code ein und führen Sie die Datei mit ruby ./exploit.rb aus. Eine Sicherheitslücke in der Open-Source-Bibliothek Cisco node-jose vor Version 0.11.0 könnte es einem nicht...

POC-CVE-2018-0114

POC-CVE-2018-0114 Dieses Repository enthält den POC eines Exploits für node-jose Stating from the last merge root@kitploit:...

CVE-2018-0114

A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature JWS standard for JSON Web Tokens JWTs...

CVE-2018-0114

CVE-2018-0114 affects the Cisco node-jose library prior to 0.11.0. The flaw arises when a JSON Web Signature (JWS) header can carry a JWK (public key) that is then trusted for verification. An unauthenticated, remote attacker could forge valid JWS objects by removing the original signature, inser...

Cisco node-jose open source library security bypass vulnerability

Cisco node-jose open source library is the United States Cisco Cisco company based on a Web browser and node.js server JSON object signing and encryption of open source library . A security bypass vulnerability exists in the Cisco node-jose open source library that stems from node-jose's use of t...