HCL MyCloud Improper Access Control Vulnerability Allowing Unauthenticated Privilege Escalation

A vulnerability in HCL MyCloud has been identified, characterized by improper access control that allows unauthenticated users to escalate privileges. This vulnerability could lead to unauthorized information disclosure and create opportunities for server-side request forgery (SSRF) and denial-of-service (DoS) attacks.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing attackers to gain elevated rights within the application. This could be followed by information disclosure and the potential to conduct server-side request forgery (SSRF) attacks or cause a denial-of-service (DoS) condition.