Main Vulnerability Database Vulnerabilities #VU91688

#VU91688 Key management errors in Java JWT (JJWT) - CVE-2024-31033

Published: June 11, 2024

Vulnerability identifier: #VU91688

Vulnerability risk: Medium

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2024-31033

CWE-ID: CWE-320

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
Java JWT (JJWT)

Software vendor:
jwtk

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. The vulnerability has unknown impact and attack vector.

Install updates from vendor's website.