TI-2023-02706 CVE-2023-2887 · GHSA-93j5-g9f6-h7xv
User Authentication Bypass in CBOT's Chatbot
Priority MEDIUM 50
Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass.
CBOT
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
CBOT records in CISA KEVNo CBOT vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Cbot Core · all components
TI-2023-02703 CVE-2023-2884 · GHSA-9hvx-xh5r-79rw
Insecure Randomness in CBOT's Chatbot
Priority MEDIUM 50
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation.
TI-2023-02701 CVE-2023-2882 · GHSA-8rc5-7hhh-7rpr
Privilege Escalation in CBOT's Chatbot
Priority MEDIUM 50
Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse.
TI-2023-02702 CVE-2023-2883 · GHSA-jm8f-qrph-485q
IDOR in CBOT's Chatbot
Priority MEDIUM 41
Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass.
TI-2023-02704 CVE-2023-2885 · GHSA-788j-v5xm-h2mq
Channel Accessible by Non-Endpoint in CBOT's Chatbot
Priority LOW 37
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM).
TI-2023-02705 CVE-2023-2886 · GHSA-2f92-w7w3-5wxq
Cross-Site WebSocket Hijacking in CBOT's Chatbot
Priority LOW 19
Missing Origin Validation in WebSockets vulnerability in CBOT Chatbot allows Content Spoofing Via Application API Manipulation.