CVE Feed

    Dashboard / CVE / CVE-2019-1010161

    CVE-2019-1010161

    perl-CRYPT-JWT 0.022 and earlier is affected by: Incorrect Access Control. The impact is: bypass authentication. The component is: JWT.pm for JWT security token, line 614 in _decode_jws(). The attack vector is: network connectivity(crafting user-controlled input to bypass authentication). The fixed version is: 0.023.

    Published:Jul 25, 2019
    Last Modified:Nov 21, 2024
    EPS:Jul 25, 2019
    EPSS Score:0.0023
    CVSS Score:9.8

    Affected Products

    Vendor
    Perl-crypt-jwt Project
    Product
    Perl-crypt-jwt

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-463 Padding Oracle Crypto Attack
    CAPEC-475 Signature Spoofing by Improper Validation

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High