CVE-2023-28124

2023-04-1900:00:00

CWE-326

hackerone

www.cve.org

cve-2023-28124

vulnerability

symmetric encryption

ui desktop

windows

AI Score

5.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "UI Desktop for Windows",
    "versions": [
      {
        "version": "Fixed on Version 0.62.3 or later.",
        "status": "affected"
      }
    ]
  }
]