CVE-2018-0114: fallo en Node-jose Library
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
40Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 43%
de la publicación al arma75 días
Publicada en NVD4 ene
1ª PoC+75d
A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header.
Productos afectados
n/a · Node-jose LibraryPoCs públicas encontradas — 16
exploitdbwww.exploit-db.com/exploits/44324no verificadogithubgithub.com/z-bool/Venom-JWT★ 288githubgithub.com/zi0Black/POC-CVE-2018-0114★ 26githubgithub.com/j4k0m/CVE-2018-0114★ 4githubgithub.com/scumdestroy/CVE-2018-0114★ 3githubgithub.com/Eremiel/CVE-2018-0114★ 2githubgithub.com/adityathebe/POC-CVE-2018-0114★ 1githubgithub.com/fevra-dev/ClaimJumper★ 1githubgithub.com/mmeza-developer/CVE-2018-0114★ 0githubgithub.com/Pandora-research/CVE-2018-0114-Exploit★ 0githubgithub.com/amr9k8/jwt-spoof-tool★ 0githubgithub.com/sealldeveloper/CVE-2018-0114-PoC★ 0githubgithub.com/n0m-d/CVE-2018-0114-Go★ 0githubgithub.com/Logeirs/CVE-2018-0114★ 0githubgithub.com/Starry-lord/CVE-2018-0114★ 0cve_referencewww.exploit-db.com/exploits/44324/no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.