6.5
Moyenne
CVE-2024-23579 HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions
Description
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DRYiCE Optibot Reset Station | Versions non publiées | |
| dryice_optibot_reset_station | 2.0 | Pas de correctif indiqué |
| dryice_optibot_reset_station | 1.0 | Pas de correctif indiqué |
Autres CVE de DRYiCE Optibot Reset Station
Les 4 CVE de DRYiCE Optibot Reset Station →
CVE-2024-30120
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application
2.9
Faible
CVE-2024-30119
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header
3.7
Faible
CVE-2024-23580
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)
6.5
Moyenne