Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2024-42163

Password Manipulation

Description

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FIWARE FIWARE Keyrock

Default version status: unaffected

  • 0 to ≤ 8.4affected

References