Cbot vulnerabilities
We track 5 vulnerabilities in Cbot products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on May 25, 2023.
Latest Cbot vulnerabilities
- 9.8 Critical severity
Chatbot: Authentication Bypass by Spoofing
Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
- 8.1 High severity
Chatbot: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM). This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
- 9.8 Critical severity
Chatbot: Use of Insufficiently Random Values
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
- 8.8 High severity
Chatbot: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
- 9.8 Critical severity
Chatbot: Generation of Incorrect Security Tokens
Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.