Lucene search
Veracode Vulnerability DatabaseVERACODE:33538HistoryJan 07, 2022 - 3:46 a.m.
Insecure Token
2022-01-0703:46:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.002 Low
EPSS
Percentile
53.0%
Pac4j has insecure token. The vulnerability exists due to an insecure validation of ID token with “none” algorithm allowing an attacker to bypass the token validation by injecting a maliciously crafted ID token by setting the alg key = “none”.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pac4j: java web security for openid connect | le | 5.1.5 | |
| pac4j: java web security for openid connect | le | 5.1.5 |
Related
github
github
ibm
ibm
cnvd
cnvd
Pac4j data forgery problem vulnerability
2022-01-07 00:00:00
prion
prion
Design/Logic Flaw
2022-01-06 13:15:00
osv
osv
CVE-2021-44878
2022-01-06 13:15:08
cve
cve
CVE-2021-44878
2022-01-06 13:15:08
cvelist
cvelist
CVE-2021-44878
2022-01-06 12:52:04
nvd
nvd
CVE-2021-44878
2022-01-06 13:15:08