CVE-2018-1000539

Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:json-jwt_project:json-jwt:*:*:*:*:*:*:*:*

Information

Published : 2018-06-26 09:29

Updated : 2018-09-02 03:29


NVD link : CVE-2018-1000539

Mitre link : CVE-2018-1000539


JSON object : View

CWE
CWE-347

Improper Verification of Cryptographic Signature

Advertisement

dedicated server usa

Products Affected

json-jwt_project

  • json-jwt