Lucene search

K
cve[email protected]CVE-2023-23346
HistoryAug 09, 2023 - 7:15 p.m.

CVE-2023-23346

2023-08-0919:15:14
CWE-327
web.nvd.nist.gov
20
cve-2023-23346
hcl dryice mycloud
broken cryptographic algorithm
confidentiality compromise
integrity compromise
nvd

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.

Affected configurations

NVD
Node
hcltechdryice_mycloudMatch10.2
OR
hcltechdryice_mycloudMatch10.4
OR
hcltechdryice_mycloudMatch10.5
OR
hcltechdryice_mycloudMatch10.6

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HCL DRYiCE MyCloud ",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "10.2, 10.4, 10.5, 10.6"
      }
    ]
  }
]

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2023-23346