HCL Glovius Cloud Outdated Hash Algorithm Vulnerability Allowing Brute-Force Attacks

A vulnerability exists in HCL Glovius Cloud version v240520 due to the use of an outdated hash algorithm. This weakness could enable attackers to efficiently guess input data through brute-force or dictionary attacks, leveraging modern hardware such as GPUs or ASICs.

Impact

Exploitation of this vulnerability could lead to successful brute-force or dictionary attacks, allowing attackers to guess input data.

Remediation

HCL Glovius has updated the hashing mechanism to incorporate the latest recommended hash algorithms, which provide stronger cryptographic security, improved data integrity, and enhanced protection for stored and transmitted data. For further assistance, users can contact the HCL Glovius team.