Lucene search

K
nvd[email protected]NVD:CVE-2023-23346
HistoryAug 09, 2023 - 7:15 p.m.

CVE-2023-23346

2023-08-0919:15:14
CWE-327
web.nvd.nist.gov
1
hcl dryice mycloud
vulnerability
cryptographic algorithm
compromise
confidentiality
integrity
sensitive information

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.

Affected configurations

NVD
Node
hcltechdryice_mycloudMatch10.2
OR
hcltechdryice_mycloudMatch10.4
OR
hcltechdryice_mycloudMatch10.5
OR
hcltechdryice_mycloudMatch10.6

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2023-23346