HCL MyXalytics is affected by an improper password policy implementation vulnerability. Weak passwords and lack of account lockout policies allow attackers to guess or brute-force passwords if the username is known.
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149 | Vendor Advisory |
Configurations
History
16 May 2025, 13:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149 - Vendor Advisory | |
| First Time |
Hcltech
Hcltech dryice Myxalytics |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.8 |
| CWE | CWE-521 | |
| CPE | cpe:2.3:a:hcltech:dryice_myxalytics:6.3:*:*:*:*:*:*:* |
11 Jan 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-11 07:15
Updated : 2025-05-16 13:47
NVD link : CVE-2024-42173
Mitre link : CVE-2024-42173
JSON object : View
Products Affected
hcltech
- dryice_myxalytics
CWE
CWE-521
Weak Password Requirements