Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.tenable.com/security/research/tra-2023-32 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: tenable
Published: 2023-09-20T15:32:44.451Z
Updated: 2024-08-02T07:44:53.803Z
Reserved: 2023-09-19T19:03:25.470Z
Link: CVE-2023-5074
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-09-20T16:15:12.750
Modified: 2023-09-22T17:57:34.747
Link: CVE-2023-5074
Redhat
No data.