Xpand-it vulnerabilities
We track 1 vulnerability in Xpand-it products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 20, 2023.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Xpand-it vulnerabilities
- 9.1 Critical severity
Write-back Manager: Improper Restriction of Excessive Authentication Attempts
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack.