1. Home
  2. CVE Database
  3. CVE-2024-42163
HIGH · 8.3

CVE-2024-42163

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link.

Vulnerability Description

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link.

CVSS Score

8.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
FiwareKeyrock<= 8.4

Related Weaknesses (CWE)

CWE-326

References

FAQ

What is CVE-2024-42163?

CVE-2024-42163 is a vulnerability with a CVSS score of 8.3 (HIGH). Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link.

How severe is CVE-2024-42163?

CVE-2024-42163 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-42163?

Check the references section above for vendor advisories and patch information. Affected products include: Fiware Keyrock.