8.2Hoch

CVE-2026-35149HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.

HCL Software DFXServer Veröffentlicht: (vor 3 Monaten)

Beschreibung

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the application without verification.

Schwachstellentyp (CWE): CWE-294

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
HCL Software DFXServer version 2.5 and below
hcltech dfx server ≤ 2.5

Referenzen und Patches

CPE-Treffer (NVD) (1)

  • cpe:2.3:a:hcltech:dfx_server:*:*:*:*:*:*:*:* ≤ 2.5