CVEvulnerability
CVE-2020-36533
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-06-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handler. The manipulation leads to weak authentication. The attack may be initiated remotely.
Affected configurations
• klapp app
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://vuldb.com/?id.160763 Third Party Advisory, VDB Entry
- https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html Exploit, Third Party Advisory
- https://vuldb.com/?id.160763 Third Party Advisory, VDB Entry
- https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html Exploit, Third Party Advisory