Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to disable two factor authorization of any user by predicting the token for the disable_2fa link.
References
Link | Resource |
---|---|
https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories | Exploit Third Party Advisory |
Configurations
History
29 Aug 2024, 15:19
Type | Values Removed | Values Added |
---|---|---|
First Time |
Fiware
Fiware keyrock |
|
References | () https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories - Exploit, Third Party Advisory | |
CWE | CWE-330 | |
Summary |
|
|
CPE | cpe:2.3:a:fiware:keyrock:*:*:*:*:*:*:*:* |
12 Aug 2024, 13:41
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-12 13:38
Updated : 2024-08-29 15:19
NVD link : CVE-2024-42164
Mitre link : CVE-2024-42164
CVE.ORG link : CVE-2024-42164
JSON object : View
Products Affected
fiware
- keyrock