CVE-2023-27172
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key via a brute-force attack, enabling token forgery and unauthorized access.
Risk Assessment
Risk of unauthorized access to the application through forged JWT tokens. An attacker could impersonate other users and gain administrative privileges.
Recommendation
Update Xpand IT Write-back Manager to a version that uses strong secret keys. Change secret keys to random and sufficiently long ones, and consider key rotation mechanisms.
Other vulnerabilities in Xpand IT Write-back Manager
See all- CVE-2023-27168Critical
An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted JSP file. An attacker can upload a malicious file that gets executed on the server.
- CVE-2023-27170High
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter. This may enable access to files outside the intended directory.
- CVE-2023-27169Medium
Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in the license class configuration, leading to the generation of hardcoded and predictable symmetric encryption keys for license generation and validation. This allows an attacker to reconstruct the keys and forge licenses.
Original NVD description (English source)
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack.