Broken Authentication in HCL MyXalytics Exposes Sensitive Data

CVE-2024-42172

Summary

HCL MyXalytics is impacted by a broken authentication vulnerability that permits attackers to seize keys, passwords, and session tokens. This flaw may result from suboptimal configurations, logic flaws, or software issues, creating conditions for unauthorized access and potential identity theft. Applications with access control, including databases, network infrastructure, and web applications, may be affected, leaving sensitive information vulnerable to exploitation.

References