CVE-2024-42176

HCL MyXalytics is affected by concurrent login vulnerability. A concurrent login vulnerability occurs when simultaneous active sessions are allowed for a single credential allowing an attacker to potentially obtain access to a user's account or sensitive information.

CVSS v3 2.6 LOW

2.6^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119919	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hcltech:dryice_myxalytics:6.3:::::::*
	cpe:2.3:a:hcltech:dryice_myxalytics:6.4:::::::*

History

16 May 2025, 13:45

Type	Values Removed	Values Added
Summary		(es) HCL MyXalytics se ve afectado por una vulnerabilidad de inicio de sesión simultáneo. Esta vulnerabilidad se produce cuando se permiten sesiones activas simultáneas con una sola credencial, lo que permite a un atacante acceder a la cuenta o información confidencial de un usuario.
References	~~() https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119919 -~~	() https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119919 - Vendor Advisory
CPE		cpe:2.3:a:hcltech:dryice_myxalytics:6.4:::::::* cpe:2.3:a:hcltech:dryice_myxalytics:6.3:::::::*
First Time		Hcltech dryice Myxalytics Hcltech

19 Mar 2025, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-03-19 15:15

Updated : 2025-05-16 13:45

NVD link : CVE-2024-42176

Mitre link : CVE-2024-42176

CVE.ORG link : CVE-2024-42176

JSON object : View

Products Affected

hcltech

dryice_myxalytics

CWE

CWE-307

Improper Restriction of Excessive Authentication Attempts

{"id": "CVE-2024-42176", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.6, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.1}]}, "published": "2025-03-19T15:15:49.490", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119919", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-307"}]}], "descriptions": [{"lang": "en", "value": "HCL MyXalytics is affected by concurrent login vulnerability. A concurrent login vulnerability occurs when simultaneous active sessions are allowed for a single credential allowing an attacker to potentially obtain access to a user's account or sensitive information."}, {"lang": "es", "value": "HCL MyXalytics se ve afectado por una vulnerabilidad de inicio de sesi\u00f3n simult\u00e1neo. Esta vulnerabilidad se produce cuando se permiten sesiones activas simult\u00e1neas con una sola credencial, lo que permite a un atacante acceder a la cuenta o informaci\u00f3n confidencial de un usuario."}], "lastModified": "2025-05-16T13:45:03.477", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:dryice_myxalytics:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C92689D-384F-41F5-9E28-517A968FAD9E"}, {"criteria": "cpe:2.3:a:hcltech:dryice_myxalytics:6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B20F87C8-808B-42EE-A727-5AC3A412FFAA"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}