CVE-2023-2884

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation.

This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-330 CWE-338

Affected software

No affected versions have been published.

Timeline

Published: May 25, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-288408.7Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various o CVE-2023-288416.8Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various o CVE-2023-288426.8Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various CVE-2023-288439.8PrestaShop/paypal is an open source module for the PrestaShop web commerce ecosystem which provides paypal payment support. A SQL injection CVE-2023-288446.5Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to download a file can stil CVE-2023-288453.5Nextcloud talk is a video & audio conferencing app for Nextcloud. In affected versions the talk app does not properly filter access to a con CVE-2023-288467.5Unpoly is a JavaScript framework for server-side web applications. There is a possible Denial of Service (DoS) vulnerability in the `unpoly-CVE-2023-288477.5Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server 24.0.0 prior to 24.0.11 CVE-2023-288485.4user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform. A vulnerability in versions 1.0.0 until 1.3 CVE-2023-288495.4GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.7, GLPI inventory endpoint can CVE-2023-28858.1Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in t CVE-2023-288505.4Pimcore Perspective Editor provides an editor for Pimcore that allows users to add/remove/edit custom views and perspectives. This vulnerabi