Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link.
References
Link | Resource |
---|---|
https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories | Exploit Third Party Advisory |
Configurations
History
29 Aug 2024, 15:17
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:fiware:keyrock:*:*:*:*:*:*:*:* | |
First Time |
Fiware
Fiware keyrock |
|
References | () https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories - Exploit, Third Party Advisory | |
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
12 Aug 2024, 13:41
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-12 13:38
Updated : 2024-08-29 15:17
NVD link : CVE-2024-42163
Mitre link : CVE-2024-42163
CVE.ORG link : CVE-2024-42163
JSON object : View
Products Affected
fiware
- keyrock
CWE
CWE-326
Inadequate Encryption Strength