Lucene search
HCLCVELIST:CVE-2023-37503HistoryOct 19, 2023 - 2:06 a.m.
CVE-2023-37503 A weak password requirements vulnerability affects HCL Compass
2023-10-1902:06:25
HCL
www.cve.org
1
hcl compass
weak password
vulnerability
user accounts
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
9.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.3%
HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "HCL Compass",
"vendor": "HCL Software",
"versions": [
{
"status": "affected",
"version": "2.0, 2.1, 2.2"
}
]
}
]Related
cnvd
cnvd
HCL Technologies Compass Weak Password Vulnerability
2023-10-23 00:00:00
nvd
nvd
CVE-2023-37503
2023-10-19 03:15:08
prion
prion
Default credentials
2023-10-19 03:15:00
cve
cve
CVE-2023-37503
2023-10-19 03:15:08
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
9.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.3%
Related for CVELIST:CVE-2023-37503