CVE-2024-42173CWE-521

HCL MyXalytics is affected by an improper password policy implementation vulnerability

Medium · published January 11, 2025

CVSS v3.1
4.8
EPSS
0%
Percentile
14.8
In the wild
Unconfirmed
What it is

HCL MyXalytics is affected by an improper password policy implementation vulnerability. Weak passwords and lack of account lockout policies allow attackers to guess or brute-force passwords if the username is known.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00244 · 14.8th percentile
Weakness
CWE-521 · Weak Password Requirements
Published
2025-01-11T06:54Z
EPSS history
Timeline
  • 11 JAN 06:54Z
    HCL MyXalytics is affected by an improper password policy implementation vulnerability
    cvelistv5