CVE-2024-42172 — HCL MyXalytics is affected by broken authentication

CVE-2024-42172

HCL MyXalytics is affected by broken authentication PUBLISHED

Description (CNA)

HCL MyXalytics is affected by broken authentication. It allows attackers to compromise keys, passwords, and session tokens, potentially leading to identity theft and system control. This vulnerability arises from poor configuration, logic errors, or software bugs and can affect any application with access control, including databases, network infrastructure, and web applications.

Affected (CNA)

Vendor / product	Versions
HCL Software / DRYiCE MyXalytics	affected 6.3

CWE

CWE-287

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.