Lucene search

HCLCVE-2023-23347

HistoryAug 09, 2023 - 8:15 p.m.

CVE-2023-23347

2023-08-0920:15:09

CWE-327

HCL

web.nvd.nist.gov

hcl dryice iautomate

cve-2023-23347

broken cryptographic algorithm

confidentiality compromise

integrity compromise

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.

Affected configurations

Nvd

Node

hcltechdryice_iautomateMatch6.0

hcltechdryice_iautomateMatch6.1

hcltechdryice_iautomateMatch6.2

VendorProductVersionCPE
hcltechdryice_iautomate6.0cpe:2.3:a:hcltech:dryice_iautomate:6.0:*:*:*:*:*:*:*
hcltechdryice_iautomate6.1cpe:2.3:a:hcltech:dryice_iautomate:6.1:*:*:*:*:*:*:*
hcltechdryice_iautomate6.2cpe:2.3:a:hcltech:dryice_iautomate:6.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hcltech	dryice_iautomate	6.0	cpe:2.3:a:hcltech:dryice_iautomate:6.0:::::::*
hcltech	dryice_iautomate	6.1	cpe:2.3:a:hcltech:dryice_iautomate:6.1:::::::*
hcltech	dryice_iautomate	6.2	cpe:2.3:a:hcltech:dryice_iautomate:6.2:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HCL DRYiCE iAutomate",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "6..0, 6.1, 6.2"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106674

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-23347