NetSight
medium6.3

CVE-2024-42165

Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accounts of any user by predicting the token …

Impact

Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accounts of any user by predicting the token for the activation link.

Affected products

VendorProductAffected versions
FiwareKeyrock
through 8.4

Weakness classification

References