PT-2025-2618 · Hcl · Hcl Myxalytics

Published 2025-01-11 · Updated 2025-05-16 · CVE-2024-42168

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions HCL MyXalytics (affected versions not specified)

Description The issue concerns an out-of-band resource load (HTTP) vulnerability. An attacker can set up a web server with malicious content and then induce the application to retrieve and process that content. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-610

CWE-918

Related Identifiers

CVE-2024-42168

Affected Products

Hcl Myxalytics

References · 9

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-42168 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42168 · Security Note
• https://t.me/cvenotify/122523 · Telegram Post
• https://twitter.com/CVEnew/status/1877914126615494917 · Twitter Post
• https://twitter.com/CveFindCom/status/1877913995467710774 · Twitter Post
• https://t.me/cvedetector/15029 · Telegram Post
• https://twitter.com/cracbot/status/1879770617819619500 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1878019846622814597 · Twitter Post