HCL MyXalytics Improper Password Policy Vulnerability Allowing Brute-Force Attacks

A vulnerability exists in HCL MyXalytics due to improper implementation of password policies. The absence of strong password requirements and account lockout mechanisms enables attackers to guess or brute-force passwords, provided they know the username.

Impact

Exploitation of this vulnerability could lead to unauthorized access through successful password guessing or brute-forcing, potentially allowing attackers to gain control over user accounts.