6.5
Moyenne
CVE-2024-23580 HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)
Description
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs). This could allow an attacker with access to the database to recover some or all encrypted values.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DRYiCE Optibot Reset Station | Versions non publiées | |
| dryice_optibot_reset_station | 2.0 | Pas de correctif indiqué |
| dryice_optibot_reset_station | 1.0 | Pas de correctif indiqué |
Autres CVE de DRYiCE Optibot Reset Station
Les 4 CVE de DRYiCE Optibot Reset Station →
CVE-2024-30120
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application
2.9
Faible
CVE-2024-30119
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header
3.7
Faible
CVE-2024-23579
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions
6.5
Moyenne