CVE-2024-53356

Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as "somerandomaccesstoken". A weak HMAC secret poses a risk because attackers can use the predictable secret to create valid JSON Web Tokens (JWTs), allowing them access to important information and actions within the application.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-53356.md	Exploit Third Party Advisory
https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-53356.md	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:easyvirt:co2scope::::::::
	cpe:2.3:a:easyvirt:dcscope::::::::

History

No history.

Information

Published : 2025-01-31 22:15

Updated : 2025-05-23 15:37

NVD link : CVE-2024-53356

Mitre link : CVE-2024-53356

CVE.ORG link : CVE-2024-53356

JSON object : View

Products Affected

easyvirt

dcscope
co2scope

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2024-53356", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-01-31T22:15:09.623", "references": [{"url": "https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-53356.md", "tags": ["Exploit", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-53356.md", "tags": ["Exploit", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as \"somerandomaccesstoken\". A weak HMAC secret poses a risk because attackers can use the predictable secret to create valid JSON Web Tokens (JWTs), allowing them access to important information and actions within the application."}, {"lang": "es", "value": "EasyVirt DCScope <=8.6.0 y CO2Scope <=1.3.0 son vulnerables a la escalada de privilegios debido a que el token de contrase\u00f1a sufre un cifrado d\u00e9bil, lo que hace posible forzar el token de contrase\u00f1a."}], "lastModified": "2025-05-23T15:37:29.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:easyvirt:co2scope:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CF4DD3C-C8D9-499F-B8B8-6D06C09249BA", "versionEndIncluding": "1.3.0"}, {"criteria": "cpe:2.3:a:easyvirt:dcscope:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5C71DCB-18BF-47D3-868B-3DA72020A06D", "versionEndIncluding": "8.6.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}