VULNERABILITY INTELLIGENCE

CVE-2023-28124

CVSS score5.5 MEDIUM
CISA KEVNot currently listed
Published2023-04-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later.

Weakness classification

  • CWE-326: Inadequate Encryption Strength

Primary references