Lucene search
PRIOn knowledge basePRION:CVE-2023-50343HistoryJan 03, 2024 - 3:15 a.m.
Improper access control
2024-01-0303:15:00
PRIOn knowledge base
www.prio-n.com
4
hcl dryice myxalytics
improper access control
controller apis
customer admin users
sensitive information
HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dryice_myxalytics | eq | 6.1 | |
| dryice_myxalytics | eq | 5.9 | |
| dryice_myxalytics | eq | 6.0 |
