CVE-2023-28509CWE-327

Weak encryption in UniRPC protocol

High · published March 29, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
19.5
In the wild
Unconfirmed
What it is

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 use weak encryption for packet-level security and passwords transferred on the wire.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00281 · 19.5th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2023-03-29T20:18Z
EPSS history
Timeline
  • 29 MAR 20:18Z
    Weak encryption in UniRPC protocol
    cvelistv5