1. Home
  2. CVE Database
  3. CVE-2024-42172
MEDIUM · 5.3

CVE-2024-42172

HCL MyXalytics is affected by broken authentication. It allows attackers to compromise keys, passwords, and session tokens, potentially leading to identity theft and system control. This vulnerabili...

Vulnerability Description

HCL MyXalytics is affected by broken authentication. It allows attackers to compromise keys, passwords, and session tokens, potentially leading to identity theft and system control. This vulnerability arises from poor configuration, logic errors, or software bugs and can affect any application with access control, including databases, network infrastructure, and web applications.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HcltechDryice Myxalytics6.3

Related Weaknesses (CWE)

CWE-287CWE-522

References

FAQ

What is CVE-2024-42172?

CVE-2024-42172 is a vulnerability with a CVSS score of 5.3 (MEDIUM). HCL MyXalytics is affected by broken authentication. It allows attackers to compromise keys, passwords, and session tokens, potentially leading to identity theft and system control. This vulnerabili...

How severe is CVE-2024-42172?

CVE-2024-42172 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-42172?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Dryice Myxalytics.