CVE-2023-47315 | BDVDB-2026-217588 Detail

Description#

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://boltonshield.com/en/cve/cve-2023-47315/

Exploit#

No public exploit known

History#

Version 12023-11-22Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.