CVE-2022-43485

Insecure random number used for generating keys for signing Jwt tokens PUBLISHED

Description (CNA)

Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT token. This issue affects OneWireless version 322.1

Affected (CNA)

Vendor / product	Versions
Honeywell / OneWireless	affected 322.1

CWE

CWE-330

References

https://process.honeywell.com/

ADP enrichment

CVE

No English description supplied.

https://process.honeywell.com/

CISA-ADP

No English description supplied.

No references supplied.