CVE-2024-42171

HCL MyXalytics is affected by insufficient session expiration PUBLISHED

Description (CNA)

HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session.

Affected (CNA)

Vendor / product	Versions
HCL Software / DRYiCE MyXalytics	affected 6.3

CWE

CWE-384

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.