Lucene search
JpcertCVE-2015-2951HistoryJun 05, 2015 - 10:59 a.m.
CVE-2015-2951
2015-06-0510:59:05
CWE-20
jpcert
web.nvd.nist.gov
56
2
cve
2015
2951
jwt
f21
signature verification
remote attackers
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
Low
EPSS
0.003
Percentile
70.0%
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.
Affected configurations
Node
f21jwtRange≤1.0
References
Social References
More
Related
prion
prion
Design/Logic Flaw
2015-06-05 10:59:00
nvd
nvd
CVE-2015-2951
2015-06-05 10:59:05
jvn
jvn
JVN#06120222: F21 JWT fails to verify token signatures
2015-06-03 00:00:00
cvelist
cvelist
CVE-2015-2951
2015-06-05 10:00:00
veracode
veracode
Signature Verification Bypass
2017-07-27 18:56:30
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
Low
EPSS
0.003
Percentile
70.0%
Related for CVE-2015-2951