HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Potential exploits can completely disrupt or take over the application.
References
Link | Resource |
---|---|
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Jan 2024, 19:41
Type | Values Removed | Values Added |
---|---|---|
References | () https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608 - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
CWE | CWE-22 | |
CPE | cpe:2.3:a:hcltech:dryice_myxalytics:6.1:*:*:*:*:*:*:* cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:* cpe:2.3:a:hcltech:dryice_myxalytics:6.0:*:*:*:*:*:*:* |
|
First Time |
Hcltech dryice Myxalytics
Hcltech |
03 Jan 2024, 03:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-03 03:15
Updated : 2024-02-28 20:54
NVD link : CVE-2023-45722
Mitre link : CVE-2023-45722
CVE.ORG link : CVE-2023-45722
JSON object : View
Products Affected
hcltech
- dryice_myxalytics
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')