JSON-JWT Project JSON-JWT 1.6.2

CPE Details

JSON-JWT Project JSON-JWT 1.6.2
json-jwt_project
json-jwt
1.6.2
2019-09-17
16h37 +00:00
2019-09-17
16h37 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:json-jwt_project:json-jwt:1.6.2:*:*:*:*:*:*:*

Informations

Vendor

json-jwt_project

Product

json-jwt

Version

1.6.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-1000539 2018-06-26 14h00 +00:00 Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 1.9.4 and later.
5.3
Medium