CVE-2023-46233

🗓️ 25 Oct 2023 20:49:31Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 30 Views

Crypto-js library prior to version 4.2.0 is 1000 times weaker in PBKDF2, defaults to SHA1, and single iteration. Version 4.2.0 contains a patch. Workaround: Use SHA256 with 250,000 iterations.

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in crypto-js version 3.1.2	10 Jan 202506:42	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access	2 Jun 202607:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace has addressed multiple vulnerabilities	27 Mar 202420:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Brix crypto-js affects IBM Process Mining CVE-2023-46233	15 Dec 202314:36	–	ibm
IBM Security Bulletins	Security Bulletin: crypto-js affects IBM Spectrum Control [CVE-2023-46233]	11 Dec 202308:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services November 2023 - Multiple CVEs addressed	12 Dec 202317:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in CloudPak for AIOPs [CVE-2023-46233]	18 Dec 202317:47	–	ibm
ATTACKERKB	CVE-2023-46233	25 Oct 202321:15	–	attackerkb
Circl	CVE-2023-46233	26 Oct 202300:39	–	circl
CNNVD	crypto-js encryption issue vulnerability	25 Oct 202300:00	–	cnnvd