TRB-070v1.0.0 · jwt_weak_secret_cracked
JWT weak secret cracked
JWT weak secret cracked identifies credential material is exposed or relies on an insufficiently protected secret.
CWE mapping
CWE-798insufficient recognition
Assurance
The reported weakness was reproduced or established directly from the supplied bytes.
Inert example
Displayed as text only. tryb does not execute this example.
eyJhbGciOiJub25lIn0.eyJzdWIiOiIxMjMifQ.Remediation
rotate-or-revoke. Assume exposed key material may no longer be private.
Verify: Revoke or rotate it at the issuer, then verify the old material no longer works.
What to verify next
Remove or rotate the affected material, then repeat the analysis on the replacement.