Lucene search

K
nvd[email protected]NVD:CVE-2023-50350
HistoryJan 03, 2024 - 2:15 a.m.

CVE-2023-50350

2024-01-0302:15:44
CWE-327
web.nvd.nist.gov
1
hcl dryice myxalytics
broken cryptographic algorithm
encryption
sensitive information
attacker ability
decryption

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.3%

HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to decrypt sensitive information.

Affected configurations

NVD
Node
hcltechdryice_myxalyticsMatch5.9
OR
hcltechdryice_myxalyticsMatch6.0
OR
hcltechdryice_myxalyticsMatch6.1

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.3%

Related for NVD:CVE-2023-50350