CVE-2022-43485
Insecure random number used for generating keys for signing Jwt tokens
- State
- Published
- Severity
- 6.2 Medium
- Published
- May 30, 2023
- Updated
- Jan 9, 2025
- Reserved
- Nov 30, 2022
Description
Use of Insufficiently Random Values in Honeywell OneWireless. This vulnerability may allow attacker to manipulate claims in client's JWT token. This issue affects OneWireless version 322.1
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.2 Medium | CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N | Honeywell |
Weaknesses
- CWE-330 Use of Insufficiently Random Values
Affected Products
| Product | Versions |
|---|---|
OneWirelessHoneywell |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.