critical9.8
CVE-2023-33371
Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session tokens, allowing attackers to sign arbitrary …
Impact
Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session tokens, allowing attackers to sign arbitrary session tokens and bypass authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Assaabloy | Control Id Idsecure | through 4.7.26.0 |