Lucene search

K
cvelistHCLCVELIST:CVE-2023-23346
HistoryAug 09, 2023 - 6:52 p.m.

CVE-2023-23346 Use of a broken cryptographic algorithm affects HCL DRYiCE MyCloud

2023-08-0918:52:37
HCL
www.cve.org
1
cve-2023-23346
cryptographic algorithm
confidentiality
integrity
sensitive information

6.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HCL DRYiCE MyCloud ",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "10.2, 10.4, 10.5, 10.6"
      }
    ]
  }
]

6.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2023-23346