CVE-2023-47315

Summary

CVE-2023-47315: The Headwind MDM Web panel version 5.22.1 contains a critical vulnerability. A hard-coded JSON Web Token (JWT) secret, publicly available in the source code on GitHub, puts the application at risk. This secret is responsible for signing the panel's JWT tokens as well as verifying incoming user tokens. The incorrect access control arising from this hard-coded secret allows unauthorized users to gain privileged access to the system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.