CVE-2023-47315

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret

published November 22, 2023

CVSS
—
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00784 · 55.6th percentile
Published
2023-11-22T00:00Z
EPSS history
Timeline
  • 22 NOV 00:00Z
    Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret
    cvelistv5