HCL DFXAnalytics Internal File Path Disclosure Vulnerability

An internal file path disclosure vulnerability has been identified in HCL DFXAnalytics version 3.0 and below. This vulnerability arises because the application dashboard unintentionally reveals sensitive information about its internal file structure and directory paths. This leakage occurs through unhandled error messages, system logs, or debugging output. As a result, a remote attacker could potentially map the underlying server environment and identify targets for further exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized mapping of the server environment, allowing attackers to identify and target specific areas for exploitation.

Remediation

Users can upgrade to HCL DFXAnalytics version 4.1, where this vulnerability has been successfully mitigated.