Clever-Cloud Biscuit-Java vulnerabilities

1 known vulnerability affecting clever-cloud/biscuit-java.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2022-31053CRITICALCVSS 9.8fixed in 2.0.02022-06-13

CVE-2022-31053 [CRITICAL] CWE-347 CVE-2022-31053: Biscuit is an authentication and authorization token for microservices architectures. The Biscuit sp Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to create a token with any access level. The version 2 of the specification mandates a different a