CVE-2024-42169CWE-639

HCL MyXalytics is affected by insecure direct object references

High · published January 11, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

HCL MyXalytics is affected by insecure direct object references. It occurs due to missing access control checks, which fail to verify whether a user should be allowed to access specific data.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00276 · 19.0th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-01-11T02:31Z
EPSS history
Timeline
  • 11 JAN 02:31Z
    HCL MyXalytics is affected by insecure direct object references
    cvelistv5