CVE-2024-23589

Due to outdated Hash algorithm, HCL Glovius Cloud could allow attackers to guess the input data using brute-force or dictionary attacks efficiently using modern hardware such as GPUs or ASICs

Scoring

Severity

MEDIUM

CVSS base score

6.8

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS probability

0.17%

CWE

CWE-328

Published

2025-05-30

Last modified

2026-03-13

Affected products

• HCL Software HCL Glovius Cloud

Weakness type

• CWE-328

Related vulnerabilities

• CVE-2026-15605 — wandb Artifact Integrity Validation hashutil.py ArtifactManifestEntry.download weak hash
• CVE-2026-41879 — Weak password hashing in R-SOFT DMS
• CVE-2026-14742 — langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash
• CVE-2026-14738 — exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hash
• CVE-2026-14630 — ForceInjection AI-fundermentals Memory Recall smart_customer_service.py get_conversation_history weak hash
• CVE-2026-10540 — Weak password hash protection in Control-M/Entreprise Manager
• CVE-2026-13455 — PostgreSQL Anonymizer: Unrestricted function can leak the secret salt
• CVE-2026-53692 — Weak hashing algorithm in Redeight CMS

Markdown version · Browse all CVEs