CVE-2024-42173
—CVSS 3.1
4.8 medium
EPSS
<1%p15
Published
()
Modified
Description
HCL MyXalytics is affected by an improper password policy implementation vulnerability. Weak passwords and lack of account lockout policies allow attackers to guess or brute-force passwords if the username is known.
- Vendors
- hcltech
- Products
- dryice myxalytics
- Weakness
- CWE-521
- Vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.