Lucene search

K
nvd[email protected]NVD:CVE-2023-50350
HistoryJan 03, 2024 - 2:15 a.m.

CVE-2023-50350

2024-01-0302:15:44
CWE-327
web.nvd.nist.gov
4
hcl dryice myxalytics
broken cryptographic algorithm
encryption
sensitive information
attacker ability
decryption

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

25.1%

HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to decrypt sensitive information.

Affected configurations

Nvd
Node
hcltechdryice_myxalyticsMatch5.9
OR
hcltechdryice_myxalyticsMatch6.0
OR
hcltechdryice_myxalyticsMatch6.1
VendorProductVersionCPE
hcltechdryice_myxalytics5.9cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:*
hcltechdryice_myxalytics6.0cpe:2.3:a:hcltech:dryice_myxalytics:6.0:*:*:*:*:*:*:*
hcltechdryice_myxalytics6.1cpe:2.3:a:hcltech:dryice_myxalytics:6.1:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

25.1%

Related for NVD:CVE-2023-50350