CVE-2022-22845

QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different customers' installations.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-01-10

Last modified

2024-08-03

Weaknesses

CWE-798

Affected products

• Homer Webapp (Qxip)

References

• http://sipcapture.org
• https://github.com/sipcapture/homer
• https://github.com/sipcapture/homer-app/commit/7f92f3afc8b0380c14af3d0fc1c365318a2d1591
• https://github.com/sipcapture/homer-app/compare/1.4.27...1.4.28