CVE-2024-33625

Publication date

2024-05-15 19:19:53

Family

icscert

State

PUBLISHED

Description

CyberPower PowerPanel business application code contains a hard-coded JWT signing key. This could result in an attacker forging JWT tokens to bypass authentication.