Security Advisory

CVE-2025-35940

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-10 20:27:51

Last updated 2025-06-11 14:03:33

Assigner tenable

State PUBLISHED

Description

The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints.

← Browse all CVEs View on cve.org ↗