PT-2025-23314 · Hcl · Hcl Glovius Cloud

Published 2025-05-30 · Updated 2025-05-30 · CVE-2024-23589

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HCL Glovius Cloud (affected versions not specified)

Description The issue is related to an outdated Hash algorithm used in HCL Glovius Cloud, which could allow attackers to efficiently guess input data using brute-force or dictionary attacks, particularly when utilizing modern hardware such as GPUs or ASICs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-328

Related Identifiers

CVE-2024-23589

Affected Products

Hcl Glovius Cloud

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-23589 · Security Note
• https://twitter.com/CVEnew/status/1928479293547446510 · Twitter Post
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0121015 · Note
• https://t.me/cvetracker/25029 · Telegram Post