medium4.8
CVE-2024-42173
HCL MyXalytics is affected by an improper password policy implementation vulnerability.
Impact
HCL MyXalytics is affected by an improper password policy implementation vulnerability. Weak passwords and lack of account lockout policies allow attackers to guess or brute-force passwords if the username is known.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Dryice Myxalytics | Version 6.3 |