6.5
Medium
CVE-2024-23579 HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions
Description
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DRYiCE Optibot Reset Station | Versions not published | |
| dryice_optibot_reset_station | 2.0 | No fix stated |
| dryice_optibot_reset_station | 1.0 | No fix stated |
Other CVEs of DRYiCE Optibot Reset Station
The 4 CVEs of DRYiCE Optibot Reset Station →
CVE-2024-30120
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application
2.9
Low
CVE-2024-30119
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header
3.7
Low
CVE-2024-23580
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)
6.5
Medium