CVE-2024-42165

Summary

CVE-2024-42165 is a vulnerability affecting FIWARE Keyrock versions prior to 8.5. This issue stems from insufficiently random values used to generate activation tokens. An attacker can exploit this weakness by predicting the token for the activation link, enabling them to illegitimately activate accounts of any user within the system. Consequently, unauthorized access and potential data breaches may ensue. System administrators should update to the latest version of FIWARE Keyrock to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.