Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-2884

Insecure Randomness in CBOT's Chatbot

Description

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CBOT Chatbot

Default version status: unaffected

  • 0 to < Core: v4.0.3.4 Panel: v4.0.3.7affected

References