Lucene search
HistoryOct 19, 2023 - 3:15 a.m.
CVE-2023-37503
hcl compass
insecure password
vulnerability
user accounts access
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.3%
HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts.
Affected configurations
Node
hcltechhcl_compassRange2.0.0–2.0.3
ORhcltechhcl_compassRange2.2.0–2.2.3
ORhcltechhcl_compassMatch2.1.0
Related
cvelist
cvelist
cnvd
cnvd
HCL Technologies Compass Weak Password Vulnerability
2023-10-23 00:00:00
prion
prion
Default credentials
2023-10-19 03:15:00
cve
cve
CVE-2023-37503
2023-10-19 03:15:08
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.3%
Related for NVD:CVE-2023-37503