CVE-2023-50351

Insecure key rotation affects MyXalytics

State
Published
Severity
8.2 High
Published
Jan 3, 2024
Updated
Jun 18, 2025
Reserved
Dec 7, 2023

Read the record on cve.org

Description

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data.

Scores

CVSSScoreVectorSource
3.18.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:NHCL

Weaknesses

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Affected Products

ProductVersions
DRYiCE MyXalyticsHCL Software
  • 5.9, 6.0, 6.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.