CVE-2024-42165

Arbitrary User Activation PUBLISHED

Description (CNA)

Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accounts of any user by predicting the token for the activation link.

Affected (CNA)

Vendor / product	Versions
FIWARE / FIWARE Keyrock	affected 0 through 8.4

CWE

CWE-330

References

https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.