CVE-2024-23579: fallo de gravedad media en HCL Software DRYiCE Optibot Reset Station
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.5epss 0.1%
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
HCL Software · DRYiCE Optibot Reset StationCVEs relacionadas — HCL Software DRYiCE Optibot Reset Station
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-30119LOWHCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security HeaderEPSS 0.2%CVE-2024-30120LOWHCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web applicationEPSS 0.2%CVE-2024-23580MEDIUMHCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)EPSS 0.1%