CVE-2024-42172CWE-287

HCL MyXalytics is affected by broken authentication

Medium · published January 11, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

HCL MyXalytics is affected by broken authentication. It allows attackers to compromise keys, passwords, and session tokens, potentially leading to identity theft and system control. This vulnerability arises from poor configuration, logic errors, or software bugs and can affect any application with access control, including databases, network infrastructure, and web applications.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00399 · 33.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-01-11T06:44Z
EPSS history
Timeline
  • 11 JAN 06:44Z
    HCL MyXalytics is affected by broken authentication
    cvelistv5