CVE-2023-28124: Weak Encryption
First published: Wed Apr 19 2023(Updated: )
Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ui Desktop | <0.62.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-28124?
CVE-2023-28124 is a vulnerability that involves improper usage of symmetric encryption in UI Desktop for Windows.
What is the severity of CVE-2023-28124?
The severity of CVE-2023-28124 is medium, with a severity value of 5.5.
How can users exploit CVE-2023-28124?
Users with access to UI Desktop configuration files can decrypt their content due to the improper usage of symmetric encryption.
How do I fix CVE-2023-28124?
To fix CVE-2023-28124, update UI Desktop for Windows to version 0.62.3 or later.
Where can I find more information about CVE-2023-28124?
You can find more information about CVE-2023-28124 in the Security Advisory Bulletin on the UI community website.
- collector/nvd-index
- vendor/ui
- canonical/ui desktop