Lucene search

OpenTextCVELIST:CVE-2023-38535

HistoryMar 13, 2024 - 9:17 p.m.

CVE-2023-38535

2024-03-1321:17:47

CWE-321

OpenText

www.cve.org

opentext

exceed turbo x

cryptographic key vulnerability

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The vulnerability could compromise the cryptographic keys.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Exceed Turbo X",
    "vendor": "OpenText™",
    "versions": [
      {
        "status": "affected",
        "version": "12.5.1"
      },
      {
        "status": "affected",
        "version": "12.5.2"
      }
    ]
  }
]

References

support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0801267

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVELIST:CVE-2023-38535