by Kastro
Paper/Archive/CVE-2023-50351

CVE-2023-50351

HCL Software DRYiCE MyXalytics — Insecure key rotation affects MyXalytics

EPSS 0.2%CVSS 9.1
critical.is priorityof 100
30
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 15.6.156 × 203.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data.

Affected

ProductAffectedFixed inSource
DRYiCE MyXalytics5.9, 6.0, 6.1–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
HCL (CNA)8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refsupport.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608