Exploit for CVE-2018-0114

kitploit · 2026-08-25

Description

Unauthenticated re-signing via embedded key in token before version 0.11.0.

Affected Cisco Node-jose versions

Cisco Node-jose< 0.11.0

All known vulnerabilities by product

CVSS 7.5 for CVE-2018-0114

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:NONE

Integrity:HIGH

Availability:NONE

CVE Information

Exploit Details

Modified:2026-08-25 04:16

Last Seen:2026-08-26 00:46

Reporter:KitPloit

Tags

toolstoken re-signingembedded keyunauthenticatedbefore 0.11.0

Other exploits for CVE-2018-0114

CVE-2018-0114-Exploit

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

POC-CVE-2018-0114

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2018-0114-PoC

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-STARRY-LORD-CVE-2018-0114
# CVE-2018-0114

0.11.0 未満

認証されていないリモート攻撃者が、トークンに埋め込まれたキーを使用して再署名できる可能性があります。 https://www.cvedetails.com/cve/CVE-2018-0114/