CVE-2024-23580

The CVE-2024-23580 entry concerns HCL DRYiCE Optibot Reset Station. Affected component: the OTP handling/encryption mechanism, where insecure encryption could allow an attacker with database access to recover some or all encrypted OTP values. Documented impact focuses on confidentiality (HIGH) wi...

CVE-2024-23580 HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords OTPs. This could allow an attacker with access to the database to recover some or all encrypted values...