CVE-2024-30150 — An unauthenticated privilege escalation vulnerability affects HCL MyCloud

CVE-2024-30150

An unauthenticated privilege escalation vulnerability affects HCL MyCloud PUBLISHED

Description (CNA)

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery (SSRF) and Denial of Service(DOS) attacks from unauthenticated users.

Affected (CNA)

Vendor / product	Versions
HCL Software / MyCloud	affected 10.8.1

CWE

CWE-269

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119368

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.