CVE-2023-50343

EPSS 0.06%
Published 03.01.2024 03:15:11
Last modified 18.06.2025 16:15:22
Source psirt@hcl.com
Teams watchlist Login
Open Login

HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Hcltech ≫ Dryice Myxalytics Version5.9

Hcltech ≫ Dryice Myxalytics Version6.0

Hcltech ≫ Dryice Myxalytics Version6.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.186

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
psirt@hcl.com	8.3	2.8	5.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-50343

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-50343

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-50343

EUVD