Threats tagged 'ghsa-38qv-wpc5-5q7v'

This vulnerability involves embedded private keys that are protected by a shared password. An attacker who obtains these keys can use them to sign practitioner assertions for arbitrary practitioner identifiers. This enables unauthorized requests for practitioner tokens, potentially allowing impersonation or unauthorized access.