A hard coded JWT. This is weird (and not mention extremely poor secure coding), never seen a hard coded JWT. These typically have a limited lifetime. This makes me think there might also be a bit more to this. sec.cloudapps.cisco.com/security/cen...
sec.cloudapps.cisco.comCisco Security Advisory: Cisco IOS XE Wireless Controller Software Arbitrary File Upload VulnerabilityA vulnerability in the Out-of-Band Access Point (AP) Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload arbit...
0 reposts3 likes