Lucene search
HistoryApr 19, 2023 - 8:15 p.m.
CVE-2023-28124
encryption
ui desktop
windows
vulnerability
fixed
version 0.62.3
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
5.4
Confidence
High
EPSS
0
Percentile
9.0%
Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later.
Affected configurations
Node
uidesktopRange<0.62.3.0windows
Related
cve
cve
CVE-2023-28124
2023-04-19 20:15:12
prion
prion
Design/Logic Flaw
2023-04-19 20:15:00
cvelist
cvelist
CVE-2023-28124
2023-04-19 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
5.4
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2023-28124