CVE-2024-42173 — HCL MyXalytics is affected by an improper password policy implementation vulnerability

CVE-2024-42173

HCL MyXalytics is affected by an improper password policy implementation vulnerability PUBLISHED

Description (CNA)

HCL MyXalytics is affected by an improper password policy implementation vulnerability. Weak passwords and lack of account lockout policies allow attackers to guess or brute-force passwords if the username is known.

Affected (CNA)

Vendor / product	Versions
HCL Software / DRYiCE MyXalytics	affected 6.3

CWE

CWE-521

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.