CVE-2024-23579
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.5EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
28 may 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
HCL Software · DRYiCE Optibot Reset Station¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →