CWE-1270.

Insuffucient Protections Lead to Brute Force

• Tenable, Inc. Security Center
• CWE-1270

Generation of Incorrect Security Tokens in GitLab

• GitLab
• CWE-1270

Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions

• CWE-1259
• CWE-1270

<1.12.2 · fixed in 1.12.2

Dell PowerProtect Data Manager: Dell PowerProtect Data Manager, versions prior to 20.2.0.0…

• Dell PowerProtect Data Manager
• CWE-1270

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a physically proximate attacker to gain access to the EOL le…

• CWE-1270

JWT token compromise can allow malicious actions including Remote Code Execution (RCE) in github.com/neuvector/neuvector

• CWE-1270

<0.0.0-20231003121714-be746957ee7c · fixed in 0.0.0-20231003121714-be746957ee7c

JWT token compromise can allow malicious actions including Remote Code Execution (RCE)

• CWE-1270

<0.0.0-20231003121714-be746957ee7c · fixed in 0.0.0-20231003121714-be746957ee7c

Privilege Escalation in CBOT's Chatbot

• CBOT Chatbot
• CWE-1270

Jenkins Report Portal Plugin configuration form does not mask tokens

• CWE-1270

<=0.5 · no fixed version yet

Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation

• wireapp wire-server
• Authentication bypass
• CWE-1270

OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend

• Authentication bypass
• CWE-1270

<8.0.0a0 · fixed in 8.0.0a0