CVE-2023-50343

HIGH

HCL DRYiCE MyXalytics - Authenticated Improper Access Control via Controller APIs

Title source: llm

Description

HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.

References (1)

Core 1

Core References

Vendor Advisory

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608

Scores

CVSS v3 8.3

EPSS 0.0006

EPSS Percentile 18.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-284

Status published

Products (3)

hcltech/dryice_myxalytics 5.9

hcltech/dryice_myxalytics 6.0

hcltech/dryice_myxalytics 6.1

Published Jan 03, 2024

Tracked Since Feb 18, 2026