8.3
Élevée
CVE-2023-50343 HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability
Description
HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DRYiCE MyXalytics | Versions non publiées |
Autres CVE de DRYiCE MyXalytics
Les 24 CVE de DRYiCE MyXalytics →
CVE-2024-42181
HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability
1.6
Faible
CVE-2024-42180
HCL MyXalytics is affected by a malicious file upload vulnerability
1.6
Faible
CVE-2024-42179
HCL MyXalytics is affected by sensitive information disclosure vulnerability
2.0
Faible
CVE-2024-42175
HCL MyXalytics is affected by a weak input validation vulnerability
2.6
Faible