Lucene search

K
nvd[email protected]NVD:CVE-2023-23347
HistoryAug 09, 2023 - 8:15 p.m.

CVE-2023-23347

2023-08-0920:15:09
CWE-327
web.nvd.nist.gov
6
hcl dryice iautomate
vulnerability
broken cryptographic algorithm
compromise
data integrity
confidentiality

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.

Affected configurations

Nvd
Node
hcltechdryice_iautomateMatch6.0
OR
hcltechdryice_iautomateMatch6.1
OR
hcltechdryice_iautomateMatch6.2
VendorProductVersionCPE
hcltechdryice_iautomate6.0cpe:2.3:a:hcltech:dryice_iautomate:6.0:*:*:*:*:*:*:*
hcltechdryice_iautomate6.1cpe:2.3:a:hcltech:dryice_iautomate:6.1:*:*:*:*:*:*:*
hcltechdryice_iautomate6.2cpe:2.3:a:hcltech:dryice_iautomate:6.2:*:*:*:*:*:*:*

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-23347