PT-2025-2628 · Hcl · Hcl Myxalytics

CVE-2024-42181 · Publicado 2025-01-12 · Atualizado 2025-05-16

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

The vulnerable software is HCL MyXalytics. The vulnerability is a cleartext transmission of sensitive information, where the application transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. This vulnerability allows unauthorized actors to intercept and access sensitive information, potentially leading to security breaches and data compromise. The vulnerability has been identified in HCL MyXalytics, but the specific versions affected are not specified in the provided information. It is essential for users of HCL MyXalytics to ensure they are using a secure communication channel to protect sensitive information. #HCLMyXalytics #CleartextTransmissionVulnerability #SensitiveInformation #CVE202442181 #DataSecurity #SecurityBreaches

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2024-42181

Produtos afetados

Hcl Myxalytics

Referências · 8

• https://t.me/cvenotify/107167 · Publicação no Telegram
• https://twitter.com/CVETracker/status/1878894976722989058 · Publicação no Twitter
• https://t.me/cvenotify/122533 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1878570304139567105 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2024-42181 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2024-42181 · Aviso do Fabricante
• https://t.me/cvedetector/15105 · Publicação no Telegram
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149 · Aviso do Fabricante