Main Vulnerability Database Vulnerabilities #VU91688

Key management errors in Java JWT (JJWT) - CVE-2024-31033

Published: June 11, 2024

Vulnerability identifier: #VU91688

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2024-31033

CWE-ID: CWE-320

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: jwtk

Affected software:
Java JWT (JJWT)

Detailed vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. The vulnerability has unknown impact and attack vector.

Install updates from vendor's website.