Lucene search

K
cvelistHCLCVELIST:CVE-2023-50350
HistoryJan 03, 2024 - 1:50 a.m.

CVE-2023-50350 A broken cryptographic algorithm impacts MyXalytics

2024-01-0301:50:00
HCL
www.cve.org
4
cve-2023-50350
broken cryptographic algorithm
encryption
sensitive information
attacker

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

25.1%

HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to decrypt sensitive information.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "DRYiCE MyXalytics",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "5.9, 6.0, 6.1"
      }
    ]
  }
]

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

25.1%

Related for CVELIST:CVE-2023-50350