CVE-2022-35540

CRITICAL CVSS: 9.8 Published: 2022-08-18 Modified: 2026-06-17

Description

Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.

Affected Platforms

Dotnetcore Agileconfig

Weakness Type

CWE-798

References