CVE-2023-28124 - Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later

Back Back to CVE browser

MEDIUM

Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later

Published Apr 19, 2023

5.5

MEDIUM

CVSS 3.1

EPSS 0.08%

Description

Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration files to decrypt their content.This vulnerability is fixed in Version 0.62.3 and later.

Affected products

Vendor n/a Product UI Desktop for Windows Default
n/a
- Version
  Fixed on Version 0.62.3 or later.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

UI Desktop for Windows

n/a

Version	Status	Constraints
Fixed on Version 0.62.3 or later.	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-326

Inadequate Encryption Strength

References (2)

Link	Providers	Tags
https://community.ui.com/releases/Security-Advisory-Bulletin-029-029/a47c68f2-1f3a-47c3-b577-eb70599644e4		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31835		Advisory