A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own JSON Web Token and use it to execute an HTTP API Method without the need for valid authentication/authorization. Under certain circumstances, this could be used by an attacker to impact system availability by conducting a Denial of Service attack.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: jci

Published: 2020-11-19T15:27:09.782887Z

Updated: 2024-09-17T02:57:34.537Z

Reserved: 2020-02-18T00:00:00

Link: CVE-2020-9049

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-11-19T16:15:11.173

Modified: 2024-11-21T05:39:54.210

Link: CVE-2020-9049

cve-icon Redhat

No data.