GHSA-vgx6-62w9-6xwh
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0 may allow an attacker who managed to retrieve the key from one device to sign JWT tokens for any device.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: August 11, 2025 6:32 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.