Unauthenticated File Downloads affect DRYiCE MyXalytics
CVE-2023-50344

5.4MEDIUM

Key Information:

Vendor

HCL Software
Status
DRYiCE MyXalytics
Vendor
CVE Published:
3 January 2024

What is CVE-2023-50344?

HCL DRYiCE MyXalytics is impacted by improper access control (Unauthenticated File Download) vulnerability. An unauthenticated user can download certain files.

Affected Version(s)

DRYiCE MyXalytics 5.9, 6.0, 6.1

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_a...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-50344 : Unauthenticated File Downloads affect DRYiCE MyXalytics