2.6Niedrig

CVE-2026-35141HCL DFXAnalytics is affected by a Login Replay Attack vulnerability

HCL Software DFXAnalytics Veröffentlicht: (vor 3 Monaten)

Beschreibung

HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit valid authentication data to achieve unauthorized access. To mitigate this risk, the application must implement a mechanism to include timestamps with every message, ensuring that messages exceeding a specific age threshold are automatically rejected by the recipient system.

Schwachstellentyp (CWE): CWE-294

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
HCL Software DFXAnalytics version 3.0 and below
hcltech dfxanalytics ≤ 3.0

Referenzen und Patches

CPE-Treffer (NVD) (1)

  • cpe:2.3:a:hcltech:dfxanalytics:*:*:*:*:*:*:*:* ≤ 3.0