HCL MyXalytics Mass Assignment Vulnerability

A mass assignment vulnerability has been identified in HCL MyXalytics version 6.6. This vulnerability allows user input to be automatically bound to application objects without adequate validation or access controls. As a result, it could enable unauthorized modifications of sensitive fields.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in sensitive application data.

Remediation

Users can upgrade to HCL MyXalytics version 6.7, which addresses this vulnerability. For assistance with the upgrade process, contact the HCL MyXalytics support team.