CVE-2023-23347 Use of a broken cryptographic algorithm affects HCL DRYiCE iAutomate
An attacker can compromise the confidentiality and integrity of sensitive information in HCL DRYiCE iAutomate due to the use of a broken cryptographic algorithm.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-23347?
CVE-2023-23347 is a medium-severity vulnerability in HCL DRYiCE iAutomate, published on 9 Aug 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.
Weakness: CWE-327
Which versions are affected by CVE-2023-23347?
It affects 1 product.
Products include Hcltech Dryice Iautomate.
How do I fix CVE-2023-23347?
No fix has been published for CVE-2023-23347 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-23347 being exploited?
There is no known exploitation of CVE-2023-23347 in the wild and no public exploit code.
Other vulnerabilities in HCL DRYiCE iAutomate
- CVE-2025-31955 HCL iAutomate is affected by a sensitive data exposure vulnerability
- CVE-2025-31952 HCL iAutomate is affected by an insufficient session expiration
- CVE-2025-31953 HCL iAutomate is affected by hardcoded credentials
- CVE-2024-42207 HCL iAutomate is affected by a session fixation vulnerability
- CVE-2025-31954 HCL iAutomate is susceptible to a sensitive information disclosure
Sources
Also known as GHSA-ph2h-6cc9-xf5r.