CVE-2023-2158

Mode C Narrative: The CVE-2023-2158 entry describes a vulnerability in Synopsys Code Dx where versions prior to 2023.4.2 are susceptible to a user impersonation attack. The underlying issue is the use of a hard-coded cipher when generating the Remember Me token, enabling a malicious actor to impe...

Synopsys Code Dx 信任管理问题漏洞

Synopsys Code Dx is a vulnerability management system from Synopsys. It combines and correlates results generated by various static and dynamic testing tools. A security vulnerability exists in Synopsys Code Dx versions prior to 2023.4.2 that stems from the use of hard-coded passwords when...

PT-2023-18284 · Code Dx · Code Dx

Name of the Vulnerable Software and Affected Versions: Code Dx versions prior to 2023.4.2 Description: The issue allows a malicious actor to gain access to another user's account by crafting a custom "Remember Me" token. This is possible due to the use of a hard-coded cipher when generating the...