PT-2024-13279 · Hcl · Hcl Dryice Myxalytics

Published 2024-01-02 · Updated 2024-01-09 · CVE-2023-45724

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HCL DRYiCE MyXalytics (affected versions not specified)

Description The HCL DRYiCE MyXalytics product is impacted by an unauthenticated file upload issue. The web application allows the upload of a certain file without requiring user authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2023-45724

Affected Products

Hcl Dryice Myxalytics

References · 7

• https://osv.dev/vulnerability/CVE-2023-45724 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45724 · Security Note
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1742436059319873721 · Twitter Post
• https://t.me/cibsecurity/74269 · Telegram Post
• https://t.me/cvenotify/66789 · Telegram Post
• https://twitter.com/CVEnew/status/1742384493518897479 · Twitter Post