Use of Hard-coded Credentials in AgileConfig.Client

심각 9.8CVE-2022-35540 · GHSA-mj5w-w588-j6xg · Published 18/08/2022 · updated 17/06/2026

요약

CVE-2022-35540은(는) AgileConfig.Client, agileconfig (dotnetcore)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.5%, 전체 취약점의 74.8%보다 높음.
조치: 1.6.8 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
AgileConfig.Client NuGet	`< 1.6.8`	`1.6.8`
agileconfig dotnetcore	`< 1.6.8`	`1.6.8`

Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.

NVD description

Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.