The Ongoing Risks of Hardcoded JWT Keys

🗓️ 12 May 2025 13:37:09Reported by Sergei OkhotinType

Critical vulnerability CVE-2025-20188 in Cisco software exposes hardcoded JWT key risks to systems.

Reporter	Title	Published	Views	Family All 158
IBM Security Bulletins	Security Bulletin: IBM Security Information Queue contains hard-coded credentials (CVE-2020-4283)	28 Feb 202018:23	–	ibm
GithubExploit	Exploit for Use of Hard-coded Credentials in Kiali	6 Jul 202013:59	–	githubexploit
ATTACKERKB	CVE-2021-40494	3 Sep 202102:15	–	attackerkb
ATTACKERKB	CVE-2023-33371	3 Aug 202301:15	–	attackerkb
ATTACKERKB	CVE-2022-3214	16 Sep 202219:15	–	attackerkb
ATTACKERKB	CVE-2022-35540	18 Aug 202223:15	–	attackerkb
ATTACKERKB	CVE-2022-36672	1 Sep 202203:15	–	attackerkb
BDU FSTEC	The vulnerability of the management console for the service mesh based on Kiali in Istio, related to the use of a hard-coded encryption key, allows attackers to escalate their privileges.	17 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application software interface of the software platform for managing security in industrial networks, MXSecurity, allows a perpetrator to enhance their privileges.	9 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DIAEnergie industrial energy consumption management system, related to the use of pre-set accounting data, allows a perpetrator to execute arbitrary codes.	7 Jun 202300:00	–	bdu_fstec