HCL MyXalytics Broken Authentication Vulnerability Allowing Identity Theft and System Control

A broken authentication vulnerability has been identified in HCL MyXalytics. This issue allows attackers to compromise keys, passwords, and session tokens, potentially leading to identity theft and unauthorized control over systems. The vulnerability stems from poor configuration, logic errors, or software bugs, and can impact any application with access control, including databases, network infrastructure, and web applications.

Impact

Exploitation of this vulnerability could result in compromised authentication credentials, session tokens, and keys, leading to unauthorized access and control over user identities and systems.