Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Real-Xkli

#23414of 53,633
10Total CVSS
Vulnerabilities · 1
PT-2021-22900
10
2021-09-03
Unknown · Adaptivescale Lxdui · CVE-2021-40494
**Name of the Vulnerable Software and Affected Versions** AdaptiveScale LXDUI versions 2.1.3 and earlier **Description** A hardcoded JWT secret key in metadata.py allows attackers to gain admin access to the host system. This issue affects AdaptiveScale LXDUI, enabling potential attackers to exploit the hardcoded key for unauthorized system access. **Recommendations** For AdaptiveScale LXDUI versions 2.1.3 and earlier, update to a version that does not contain the hardcoded JWT secret key to prevent admin access exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.