CVE-2023-50343: Improper Access Control (Controller APIs) affects DRYiCE MyXalytics

First published: Wed Jan 03 2024(Updated: )

HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.

Credit: psirt@hcl.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/first-publish-date
• agent/last-modified-date
• agent/description
• agent/references
• agent/author
• agent/severity
• agent/title
• agent/event
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/softwarecombine
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/hcltech
• canonical/hcltech dryice myxalytics
• version/hcltech dryice myxalytics/5.9
• version/hcltech dryice myxalytics/6.0
• version/hcltech dryice myxalytics/6.1