VULNERABILITY INTELLIGENCE
CVE-2024-23579
CVSS score6.5 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-05-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-326