CVE-2024-1721CWE-347

Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR…

Medium · published May 21, 2024

CVSS v4.0
5.6
EPSS
0%
Percentile
1.1
In the wild
Unconfirmed
What it is

Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1.

The record
Technical detail
CVSS v4.0
5.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/AU:N/R:U/V:C/RE:M/U:Green
EPSS
0.00107 · 1.1th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2024-05-21T15:41Z
EPSS history
Timeline
  • 21 MAY 15:41Z
    Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR…
    cvelistv5