Weak Cryptography

2022-02-2306:11:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

cryptographic key

attacker

specially crafted data

arbitrary commands

system

software

EPSS

0.001

Percentile

46.2%

JSON

github.com/gravitl/netmaker is using weak cryptography. The vulnerability exists because a hard-coded cryptographic key is used in the code base which allows an attacker to pass specially crafted data to the application and execute arbitrary commands on the system.