CVE Vulnerabilities

CVE-2024-42177

Inadequate Encryption Strength

Published: Apr 17, 2025 | Modified: May 16, 2025
CVSS 3.x
6.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system.

Weakness

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

Affected Software

Name Vendor Start Version End Version
Dryice_myxalytics Hcltech 6.3 (including) 6.3 (including)

Potential Mitigations

References