CWE-1270

10 CVEs classified under CWE-1270. Browse by severity and year.

Top CVEs for CWE-1270
CVESeverityScorePublishedSummary
CVE-2023-2882Critical9.82023-05-25Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatbot: before Core: v4…
CVE-2022-31122Critical9.82022-10-18Wire is an encrypted communication and collaboration platform. Versions prior to 2022-07-12/Chart 4.19.0 are subject to Token Recipient Confusion. If an attack…
CVE-2026-49499High8.82026-07-22Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged att…
CVE-2026-54593High8.12026-07-28Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/file endpoint accept…
CVE-2025-59698Medium6.82025-12-02Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a physically proxima…
CVE-2023-22644Medium5.52023-09-20A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malici…
CVE-2026-19636Medium5.32026-08-14An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This ha…
CVE-2026-15831Medium4.32026-07-29GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allo…
CVE-2023-30524Medium4.32023-04-12Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attacke…
CVE-2023-321882024-10-16A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malici…
All CVEs classified under CWE-1270 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-19636Medium5.32026-08-14An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This ha…
CVE-2026-15831Medium4.32026-07-29GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allo…
CVE-2026-54593High8.12026-07-28Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/file endpoint accept…
CVE-2026-49499High8.82026-07-22Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged att…
CVE-2025-59698Medium6.82025-12-02Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a physically proxima…
CVE-2023-321882024-10-16A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malici…
CVE-2023-22644Medium5.52023-09-20A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malici…
CVE-2023-2882Critical9.82023-05-25Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatbot: before Core: v4…
CVE-2023-30524Medium4.32023-04-12Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attacke…
CVE-2022-31122Critical9.82022-10-18Wire is an encrypted communication and collaboration platform. Versions prior to 2022-07-12/Chart 4.19.0 are subject to Token Recipient Confusion. If an attack…