CVE-2024-42165 | BDVDB-2026-245140 Detail
FIWAREFIWARE Keyrock
Description#
Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accounts of any user by predicting the token for the activation link.
Impact#
CAPEC-59 Session Credential Falsification through Prediction
Weaknesses#
- CWE-330 Use of Insufficiently Random Values
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.