← volver
CVE-2023-50343

Improper Access Control (Controller APIs) affects DRYiCE MyXalytics

CVSS 8.3 HIGHEPSS 0.4%CWE-284
HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →