CVE-2023-2885

High

Published: 25/05/2023(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability in CBOT Chatbot related to improper enforcement of message integrity during transmission in a communication channel allows an adversary to conduct an Adversary in the Middle (AiTM) attack.

Risk Assessment

The organization may be exposed to interception and modification of messages, leading to a loss of confidentiality and data integrity.

Recommendation

It is recommended to update the Chatbot to a version that includes fixes for this vulnerability to secure communication against AiTM attacks.

Other vulnerabilities in CBOT Chatbot (przed Core: v4.0.3.4, Panel: v4.0.3.7)

CVE-2023-2882Critical
The vulnerability in CBOT Chatbot related to the generation of incorrect security tokens allows for token impersonation and privilege abuse.

Original NVD description (English source)

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM). This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.