PT-2025-2628 · Hcl · Hcl Myxalytics

Published 2025-01-12 · Updated 2025-05-16 · CVE-2024-42181

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

The vulnerable software is HCL MyXalytics. The vulnerability is a cleartext transmission of sensitive information, where the application transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. This vulnerability allows unauthorized actors to intercept and access sensitive information, potentially leading to security breaches and data compromise. The vulnerability has been identified in HCL MyXalytics, but the specific versions affected are not specified in the provided information. It is essential for users of HCL MyXalytics to ensure they are using a secure communication channel to protect sensitive information. #HCLMyXalytics #CleartextTransmissionVulnerability #SensitiveInformation #CVE202442181 #DataSecurity #SecurityBreaches

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2024-42181

Affected Products

Hcl Myxalytics

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-42181 · Security Note
• https://osv.dev/vulnerability/CVE-2024-42181 · Vendor Advisory
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149 · Vendor Advisory
• https://t.me/cvenotify/107167 · Telegram Post
• https://twitter.com/CVETracker/status/1878894976722989058 · Twitter Post
• https://t.me/cvenotify/122533 · Telegram Post
• https://twitter.com/CVEnew/status/1878570304139567105 · Twitter Post
• https://t.me/cvedetector/15105 · Telegram Post