PT-2025-2622 · Hcl · Hcl Myxalytics

Published 2025-01-11 · Updated 2025-05-16 · CVE-2024-42172

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HCL MyXalytics (affected versions not specified)

Description The issue arises from broken authentication, allowing attackers to compromise keys, passwords, and session tokens. This can potentially lead to identity theft and system control. The vulnerability is caused by poor configuration, logic errors, or software bugs and can affect any application with access control, including databases, network infrastructure, and web applications.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Insufficiently Protected Credentials

Weakness Enumeration

CWE-287

CWE-522

Related Identifiers

CVE-2024-42172

Affected Products

Hcl Myxalytics

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-42172 · Security Note
• https://osv.dev/vulnerability/CVE-2024-42172 · Vendor Advisory
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149 · Vendor Advisory
• https://t.me/cvedetector/15040 · Telegram Post
• https://twitter.com/CVEnew/status/1877971383826747667 · Twitter Post
• https://t.me/cvenotify/107138 · Telegram Post
• https://t.me/cvenotify/122527 · Telegram Post