9 matches found
CVE-2024-30150
HCL MyCloud is affected by an improper access control vulnerability that enables unauthenticated privilege escalation. Reported to allow information disclosure and may enable SSRF and Denial of Service from unauthenticated users. Some sources cite HCL MyCloud v10.8.1 as affected; others do not sp...
CVE-2023-23346
CVE-2023-23346 affects HCL DRYiCE MyCloud and is caused by the use of a broken cryptographic algorithm, potentially compromising confidentiality and integrity of sensitive data. Multiple sources (NVD entry and mirrored records) confirm the issue, describing the vulnerability as related to weak cr...
CVE-2026-56577
Technical details (affected products, components, versions, root cause, fixes) are not publicly provided in the supplied documents. Monitor for updates from authoritative sources to obtain concrete information.
CVE-2026-56580
Technical details (affected product components, root cause, impact specifics, or remediation steps) are not publicly provided in the provided documents. Monitor for updates.
CVE-2026-56579
CVE-2026-56579 concerns HCL MyCloud where a license key is exposed in HTTP responses, enabling potential misuse of exposed information and compromising application security. The available sources confirm the issue and describe the risk as arising from sensitive data leakage, but they do not speci...
CVE-2026-56578
Technical details about CVE-2026-56578 are not provided in the supplied documents; monitor for updates as information on affected versions, impact, and fixes is not publicly available here.
CVE-2026-56582
CVE-2026-56582 affects HCL MyCloud, describing an SSL/TLS LUCKY13 padding-oracle vulnerability that could allow an attacker to decrypt sensitive data over the network. CVSS 3.1 (LOW) with Network attack, High complexity, Low privileges, No user interaction, and no impact to integrity/availability...
CVE-2026-56583
Technical details are not publicly available in the provided documents. Monitor for updates from HCL and NVD to obtain affected versions, root cause, and remediation guidance.
CVE-2026-56581
CVE-2026-56581 affects HCL MyCloud with a Cookie Attribute Path Not Set issue. The vulnerability is described as enabling potential unauthorized access to session data or authentication tokens due to cookies not setting the Path attribute, increasing exposure. The available sources (NVD/CVELIST) ...