CVE-2024-42163

8.3HIGH

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link.

发布于: 8/12/2024更新于: 8/29/2024

描述

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link.

AI分析AI驱动

受影响产品

fiwarekeyrock

参考资料