← Database

CVE-2024-42171

MEDIUM CVSS: 6.4 Published: 2025-01-11 Modified: 2026-06-17

Description

HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session.

Affected Platforms

Hcltech Dryice Myxalytics

Weakness Type

CWE-384, CWE-384

References