Vulnerabilities > CVE-2023-50343 - Unspecified vulnerability in Hcltech Dryice Myxalytics 5.9/6.0/6.1

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
hcltech

Summary

HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.

Vulnerable Configurations

Part Description Count
Application
Hcltech
3