NetSight
IP …
critical9.8

CVE-2023-26089

European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing.

Impact

European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing. The affected versions are 5.15.0 through 6.27.5.

Affected products

VendorProductAffected versions
Echa.EuropaIuclid
from 5.15.0 before 6.27.6

Weakness classification

CWE-798

References