Lucene search

HCLCVE-2023-28006

HistoryJun 22, 2023 - 11:15 p.m.

CVE-2023-28006

2023-06-2223:15:09

CWE-327

HCL

web.nvd.nist.gov

osd

bare metal server

cryptographic algorithm

security

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

9.0%

JSON

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure.

Affected configurations

Nvd

Node

hcltechbigfix_osd_bare_metal_serverRange≤311.12

VendorProductVersionCPE
hcltechbigfix_osd_bare_metal_server*cpe:2.3:a:hcltech:bigfix_osd_bare_metal_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hcltech	bigfix_osd_bare_metal_server	*	cpe:2.3:a:hcltech:bigfix_osd_bare_metal_server::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HCL BigFix OSD Bare Metal Server",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "< 311.12"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-28006