logo

Database

Sensitive information in source code In lxdui

Description

AdaptiveScale LXDUI Hardcoded JWT Secret Key A Hardcoded JWT Secret Key in __metadata__.py metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version

Aliases

1. CVE-2021-404942. NVD-2021-404943. OSV-2021-404944. GCVE-2021-40494

References

1. https://github.com/AdaptiveScale/lxdui/pull/3532. https://github.com/AdaptiveScale/lxdui/commit/e4bffeb9d69a5700a642cb6424453d1894e50d843. https://github.com/pypa/advisory-database/tree/main/vulns/lxdui/PYSEC-2021-342.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.