CVE-2023-50344

EPSS 0.28%
Veröffentlicht 03.01.2024 03:15:11
Zuletzt bearbeitet 18.06.2025 16:15:23
Erkennungen
Login

Unauthenticated File Downloads affect DRYiCE MyXalytics

HCL DRYiCE MyXalytics is impacted by improper access control (Unauthenticated File Download) vulnerability. An unauthenticated user can download certain files.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hcltech ≫ Dryice Myxalytics Version 5.9

Hcltech ≫ Dryice Myxalytics Version 6.0

Hcltech ≫ Dryice Myxalytics Version 6.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.28%	0.193

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.4	2.8	2.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
psirt@hcl.com	5.4	2.8	2.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-50344

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-50344

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-50344

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-50344