CVE-2025-49151

Summary

The affected products could allow an unauthenticated attacker to generate forged JSON Web Tokens (JWT) to bypass authentication.

Affected Software

Weaknesses

• CWE-547: CWE-547: Use of Hard-coded, Security-relevant Constants

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07

• ←Previous
• Next→