Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker
Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-23650US | high8.8OT elevated | — | ||
Netmaker is a platform for creating and managing virtual overlay networks using WireGuard. Prior to versions 0.8.5, 0.9.4, and 010.0, there is a hard-coded cryptographic key in the… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/gravitl/netmaker/commit/3d4f44ecfe8be4ca38920556ba3b90502ffb4feeFIX
- https://github.com/gravitl/netmaker/commit/e9bce264719f88c30e252ecc754d08f422f4c080FIX
- https://github.com/gravitl/netmaker/pull/781/commits/1bec97c662670dfdab804343fc42ae4b1d050a87FIX
- https://github.com/gravitl/netmaker/security/advisories/GHSA-86f3-hf24-76q4ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2022-23650ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan