CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. See the original NVD description below for full technical details.
CVE
CVE-2023-27172
Severity
CRITICAL
CVSS
9.1
EPSS
0.67%
Original NVD Description
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack.
Related CVEs
Other vulnerabilities affecting the same vendor(s)