CVE-2023-5074

Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28

Score

CVSS 3.1 9.8 Critical

Status

Modified - vulnreport@tenable.com

Published

2023-09-20

Last modified

2024-09-24

Weaknesses

CWE-798

Affected products

• D-view 8 (D-link)
• D-view 8 (Dlink)

References

• https://www.tenable.com/security/research/tra-2023-32