Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33591
HistoryJan 11, 2022 - 11:39 a.m.

Insecure Session Management

2022-01-1111:39:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.002 Low

EPSS

Percentile

54.9%

github.com/sipcapture/homer-app uses insecure session management. The vulnerability exists as the JWT secret key is hard coded in constants.go file, allowing a user to gain unauthorized access to the application if the default secret key is not changed.

0.002 Low

EPSS

Percentile

54.9%