CVE-2024-30119lowCWE-326CWE-522

CVE-2024-30119: falha de baixa gravidade em HCL Software DRYiCE Optibot Reset Station

HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar DRYiCE Optibot Reset Station

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.7epss 0.2%
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header.  This could allow an attacker to intercept or manipulate data during redirection.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
HCL Software · DRYiCE Optibot Reset Station
CVEs relacionadas — HCL Software DRYiCE Optibot Reset Station

No mesmo produto, das mais perigosas para as menos.

CVE-2024-30120LOWHCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web applicationEPSS 0.2%CVE-2024-23580MEDIUMHCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)EPSS 0.1%CVE-2024-23579MEDIUMHCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questionsEPSS 0.1%