Lucene search
Veracode Vulnerability DatabaseVERACODE:13402HistoryMar 05, 2019 - 7:53 a.m.
Information Disclosure
2019-03-0507:53:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
60.8%
Auth0-WCF-Service-JWT is vulnerable to information disclosure. The JWT signature is revealed in an error message when the JWT signature validation fails, allowing attackers to abuse the erroneous behavior to obtain and forge valid signatures for arbitrary tokens and bypass authentication and authorization mechanisms.
| CPE | Name | Operator | Version |
|---|---|---|---|
| auth0-wcf-service-jwt | le | 1.0.3 |
Related
cve
cve
CVE-2019-7644
2019-04-11 20:29:00
osv
osv
Critical severity vulnerability that affects Auth0-WCF-Service-JWT
2019-04-18 14:28:03
nvd
nvd
CVE-2019-7644
2019-04-11 20:29:00
prion
prion
Code injection
2019-04-11 20:29:00
cvelist
cvelist
CVE-2019-7644
2019-04-11 19:44:18
gitlab
gitlab
Generation of Error Message Containing Sensitive Information
2019-04-11 00:00:00
github
github
Critical severity vulnerability that affects Auth0-WCF-Service-JWT
2019-04-18 14:28:03