HCL DRYiCE MyXalytics is impacted by improper access control (Unauthenticated File Download) vulnerability. An unauthenticated user can download certain files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dryice_myxalytics | Hcltech | 5.9 (including) | 5.9 (including) |
| Dryice_myxalytics | Hcltech | 6.0 (including) | 6.0 (including) |
| Dryice_myxalytics | Hcltech | 6.1 (including) | 6.1 (including) |
References
- https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0109608
- https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0109608