Lucene search

K
cvelistHCLCVELIST:CVE-2023-23347
HistoryAug 09, 2023 - 7:01 p.m.

CVE-2023-23347 Use of a broken cryptographic algorithm affects HCL DRYiCE iAutomate

2023-08-0919:01:57
HCL
www.cve.org
2
cve-2023-23347
hcl dryice
cryptographic algorithm

CVSS3

6.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

AI Score

7.1

Confidence

High

EPSS

0

Percentile

9.0%

HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HCL DRYiCE iAutomate",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "6..0, 6.1, 6.2"
      }
    ]
  }
]

CVSS3

6.4

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

AI Score

7.1

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2023-23347