CVE-2023-37503

A weak password requirements vulnerability affects HCL Compass

High · published October 19, 2023

CVSS v3.1
8.1
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00527 · 43.8th percentile
Published
2023-10-19T02:06Z
EPSS history
Timeline
  • 19 OCT 02:06Z
    A weak password requirements vulnerability affects HCL Compass
    cvelistv5