Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-23579 EUVD-2024-21074

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions

Published May 28, 2024 · Updated Aug 1, 2024 · Assigned by HCL

Description

HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values.

Affected products

VendorProductAffectedFixed
HCL Software DRYiCE Optibot Reset Station 1.0, 2.0 —

References