Lucene search

HCLCVE-2023-23342

HistoryAug 10, 2023 - 7:15 p.m.

CVE-2023-23342

2023-08-1019:15:09

HCL

web.nvd.nist.gov

cve-2023-23342

local files

cryptographic keys

validation

manipulation

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.7

Confidence

High

EPSS

Percentile

9.0%

JSON

If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented.

Affected configurations

Nvd

Node

hcltechhcl_nomadRange1.0.0–1.0.7-

VendorProductVersionCPE
hcltechhcl_nomad*cpe:2.3:a:hcltech:hcl_nomad:*:*:*:*:*:-:*:*

Vendor	Product	Version	CPE
hcltech	hcl_nomad	*	cpe:2.3:a:hcltech:hcl_nomad::::::-::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HCL Nomad for web",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.0.7"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106600

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-23342