medium6.8
CVE-2024-42170
HCL MyXalytics is affected by a session fixation vulnerability.
Impact
HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Dryice Myxalytics | Version 6.3 |