JSON Web Token Libraries Multiple Security Bypass Vulnerabilities

Bugtraq ID:	73702
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 31 2015 12:00AM
Updated:	Mar 31 2015 12:00AM
Credit:	Tim McLean
Vulnerable:	Namshi jose 0 José Padilla pyjwt 0 David Halls python-jwt 0 Auth0 node-jsonwebtoken 0
Not Vulnerable:

JSON Web Token Libraries Multiple Security Bypass Vulnerabilities

JSON Web Token Libraries are prone to multiple security-bypass vulnerabilities.

Successfully exploiting these issues will allow attackers to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.

JSON Web Token Libraries Multiple Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

JSON Web Token Libraries Multiple Security Bypass Vulnerabilities

References:

• Disable 'none' algorithm by default (odino)
  
• If pub_key specified and algorithm in token is none, throw an error. (davedoesdev)
  
• Merge pull request #109 from mark-adams/algo-validation-fixes (jpadilla)
  
• Signature Bypass in several JSON Web Token Libraries (CVEs Needed?) (Jeremy Spilman)
  
• Verification with an asymmetric key of a token signed with a symmetri�?� (jfromaniello)