Lucene search

HCLCVE-2023-50351

HistoryJan 03, 2024 - 2:15 a.m.

CVE-2023-50351

2024-01-0302:15:44

HCL

web.nvd.nist.gov

hcl

dryice myxalytics

cve-2023-50351

key rotation

security vulnerability

data compromise

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data.

Affected configurations

Nvd

Node

hcltechdryice_myxalyticsMatch5.9

hcltechdryice_myxalyticsMatch6.0

hcltechdryice_myxalyticsMatch6.1

VendorProductVersionCPE
hcltechdryice_myxalytics5.9cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:*
hcltechdryice_myxalytics6.0cpe:2.3:a:hcltech:dryice_myxalytics:6.0:*:*:*:*:*:*:*
hcltechdryice_myxalytics6.1cpe:2.3:a:hcltech:dryice_myxalytics:6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hcltech	dryice_myxalytics	5.9	cpe:2.3:a:hcltech:dryice_myxalytics:5.9:::::::*
hcltech	dryice_myxalytics	6.0	cpe:2.3:a:hcltech:dryice_myxalytics:6.0:::::::*
hcltech	dryice_myxalytics	6.1	cpe:2.3:a:hcltech:dryice_myxalytics:6.1:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "DRYiCE MyXalytics",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "5.9, 6.0, 6.1"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

Related for CVE-2023-50351