Lucene search

[email protected]CVE-2023-50346

HistoryJan 03, 2024 - 2:15 a.m.

CVE-2023-50346

2024-01-0302:15:43

[email protected]

web.nvd.nist.gov

hcl

dryice

myxalytics

cve-2023-50346

information disclosure

vulnerability

nvd

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

JSON

HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed file information.

Affected configurations

NVD

Node

hcltechdryice_myxalyticsMatch5.9

hcltechdryice_myxalyticsMatch6.0

hcltechdryice_myxalyticsMatch6.1

CPENameOperatorVersion
hcltech:dryice_myxalyticshcltech dryice myxalyticseq5.9
hcltech:dryice_myxalyticshcltech dryice myxalyticseq6.0
hcltech:dryice_myxalyticshcltech dryice myxalyticseq6.1

CPE	Name	Operator	Version
hcltech:dryice_myxalytics	hcltech dryice myxalytics	eq	5.9
hcltech:dryice_myxalytics	hcltech dryice myxalytics	eq	6.0
hcltech:dryice_myxalytics	hcltech dryice myxalytics	eq	6.1

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "DRYiCE MyXalytics",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "5.9, 6.0, 6.1"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

JSON

Related for CVE-2023-50346

cvelist1 prion1 nvd1