CVE-2024-42163

Published: Aug 12, 2024Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link.

Affected (1)

Products: Fiware: Keyrock

Fiware

1 product

Keyrock

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fiware Keyrock	Up to 8.4

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (1)

https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories

Source: office@cyberdanube.com

ExploitThird Party Advisory

Timeline

No history available yet.