CVE-2022-37177

CVE-2022-37177 - HireVue-Broken-Or-Risky-Cryptographic-Algorithm 当访问 HireVue 为面试提供的面试邀请链接时，你会被引导到一个条款页面，在开始录制并计时的面试过程之前，你需要先同意这些条款。这个初始 HTTP 响应中包含了面试过程中会被问到的面试问题，这些问题使用栅栏密码（rail fence cipher）进行编码。这种编码很容易被解密，因此在实际开始面试之前就能获得所有面试问题。如果你不同意条款，面试就不会开始，所以你可以随意反复访问该链接然后离开，直到你同意开始面试为止。HireVue...

CVE-2022-37177

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

CVE-2022-37177

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

CVE-2022-37177

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

Design/Logic Flaw

DISPUTED HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the...

CVE-2022-37177

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

CVE-2022-37177

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

CVE-2022-37177

The CVE-2022-37177 entry concerns the HireVue Hiring Platform. Affected product: HireVue Hiring Platform, V1.0. Issue described as Use of a Broken or Risky Cryptographic Algorithm, with notes that the vendor disputes this claim and questions CVE ID rules, including that no product with V1.0 may e...

HireVue Hiring Platform 加密问题漏洞

HireVue Hiring Platform is a talent experience platform from HireVue USA. designed to automate workflows and simplify hiring at scale. HireVue Hiring Platform version V1.0 suffers from an encryption issue vulnerability that stems from the use of a corrupted or risky encryption algorithm...