CVE-2024-42163
Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.3
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
- EPSS probability
- 0.33%
- CWE
- CWE-326
- Published
- 2024-08-12
- Last modified
- 2026-03-13
Affected products
- FIWARE FIWARE Keyrock
Weakness type
Related vulnerabilities
- CVE-2026-86670 — aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
- CVE-2023-54356 — Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites
- CVE-2026-81718 — openssl_encrypt before 1.4.9 Weak Cryptographic Parameters
- CVE-2026-79084 — Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to...
- CVE-2026-74889 — openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
- CVE-2026-65777 — Active Directory Security Feature Bypass Vulnerability
- CVE-2026-9201 — Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
- CVE-2026-59651 — BKS keystore accepts legacy version with 16-bit integrity MAC key