PT-2023-22000 · Unknown · Cbot Chatbot
CVE-2023-2884
·
Publicado
2023-05-25
·
Atualizado
2023-08-02
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
CBOT Chatbot versions prior to Core: v4.0.3.4
CBOT Chatbot versions prior to Panel: v4.0.3.7
Description
The issue is related to the use of a cryptographically weak pseudo-random number generator (PRNG) and insufficiently random values in the CBOT Chatbot, allowing signature spoofing by key recreation.
Recommendations
For versions prior to Core: v4.0.3.4, update to Core: v4.0.3.4 or later to resolve the issue.
For versions prior to Panel: v4.0.3.7, update to Panel: v4.0.3.7 or later to resolve the issue.
Correção
Use of Insufficiently Random Values
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cbot Chatbot