CVE-2022-37177

CVE-2022-37177 - HireVue-Broken-Or-Risky-Cryptographic-Algorithm HireVue가 인터뷰를 위해 제공하는 인터뷰 초대 링크를 방문하면, 녹화되고 시간이 제한된 인터뷰 프로세스를 시작하기 전에 약관에 동의하는 약관 페이지로 이동하게 됩니다. 이 초기 HTTP 응답에는 인터뷰 중에 질문될 질문들이 rail fence cipher로 인코딩되어 포함되어 있습니다. 이는 쉽게 복호화할 수 있으므로 실제로 프로세스를 시작하기 전에 모든 인터뷰 질문에 접근할 수 있습니다. 약관에 동의하지...

CVE-2022-37177

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

CVE-2022-37177

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

CVE-2022-37177

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

Design/Logic Flaw

DISPUTED HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the...

CVE-2022-37177

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

CVE-2022-37177

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

CVE-2022-37177

The CVE-2022-37177 entry concerns the HireVue Hiring Platform. Affected product: HireVue Hiring Platform, V1.0. Issue described as Use of a Broken or Risky Cryptographic Algorithm, with notes that the vendor disputes this claim and questions CVE ID rules, including that no product with V1.0 may e...

CVE-2022-37177: Use of a Broken or Risky Cryptographic Algorithm

HireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm. NOTE: this is disputed by the vendor for multiple reasons, e.g., it is inconsistent with CVE ID assignment rules for cloud services, and no product with version V1.0 exists. Furthermore, the rail-fence...

HireVue Hiring Platform 加密问题漏洞

HireVue Hiring Platform is a talent experience platform from HireVue USA. designed to automate workflows and simplify hiring at scale. HireVue Hiring Platform version V1.0 suffers from an encryption issue vulnerability that stems from the use of a corrupted or risky encryption algorithm...