VULNERABILITY INTELLIGENCE

CVE-2024-42172

CVSS score5.3 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-01-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

HCL MyXalytics is affected by broken authentication. It allows attackers to compromise keys, passwords, and session tokens, potentially leading to identity theft and system control. This vulnerability arises from poor configuration, logic errors, or software bugs and can affect any application with access control, including databases, network infrastructure, and web applications.

Weakness classification

  • psirt@hcl.com: CWE-287
  • nvd@nist.gov: CWE-522

Primary references