3.7
Low
CVE-2024-30119 HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header
Description
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DRYiCE Optibot Reset Station | Versions not published | |
| dryice_optibot_reset_station | 2.0 | No fix stated |
| dryice_optibot_reset_station | 1.0 | No fix stated |
Other CVEs of DRYiCE Optibot Reset Station
The 4 CVEs of DRYiCE Optibot Reset Station →
CVE-2024-30120
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application
2.9
Low
CVE-2024-23580
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)
6.5
Medium
CVE-2024-23579
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions
6.5
Medium