Description (CNA)
Open 5GS WebUI uses a hard-coded JWT signing key (change-me) whenever the environment variable JWT_SECRET_KEY is unset
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NewPlane / open5GS | affected 0 through 2.7.6 |
CWE
No CWE identifiers supplied.
References
- https://github.com/open5gs/open5gs/issues/2264
- https://github.com/open5gs/open5gs/issues/856
- https://github.com/open5gs/open5gs/pull/857
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.