5.3
Medium
CVE-2024-42172 HCL MyXalytics is affected by broken authentication
Description
HCL MyXalytics is affected by broken authentication. It allows attackers to compromise keys, passwords, and session tokens, potentially leading to identity theft and system control. This vulnerability arises from poor configuration, logic errors, or software bugs and can affect any application with access control, including databases, network infrastructure, and web applications.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DRYiCE MyXalytics | 6.3 | No fix stated |
Other CVEs of DRYiCE MyXalytics
The 24 CVEs of DRYiCE MyXalytics →
CVE-2024-42181
HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability
1.6
Low
CVE-2024-42180
HCL MyXalytics is affected by a malicious file upload vulnerability
1.6
Low
CVE-2024-42179
HCL MyXalytics is affected by sensitive information disclosure vulnerability
2.0
Low
CVE-2024-42175
HCL MyXalytics is affected by a weak input validation vulnerability
2.6
Low