CVE-2024-40430 in SFTPGO

Riassunto

di MITRE • 22/07/2024

In SFTPGO 2.6.2, the JWT implementation lacks cerrtain security measures, such as using JWT ID (JTI) claims, nonces, and proper expiration and invalidation mechanisms.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: MITRE
• Prenotare: 05/07/2024
• Divulgazione: 22/07/2024
• Moderazione: revocato
• Voce: VDB-272151
• CPE: pronto
• CWE: CWE-639 (confermato)
• CVSS: 5.3 (NVD)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-40430
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-40430
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-40430/