HCL MyCloud vulnerabilities

Concurrent Login vulnerability in HCL MyCloud increases the risk of unauthorized access, session hijacking, and account misuse.

HCL MyCloud is affected by the SSL/TLS LUCKY13 vulnerability. An attacker can decrypt sensitive information via a TLS/SSL padding oracle attack.

HCL MyCloud has a missing Cookie Attribute Path vulnerability. This increases the risk of unauthorized access to session data or authentication tokens.

HCL MyCloud is affected by using components with known vulnerabilities (IIS Server). This may allow attackers to exploit publicly disclosed weaknesses and compromise the system.

Vulnerability in HCL MyCloud exposes the license key in HTTP responses. Attackers can misuse this information to compromise application security.

HCL MyCloud exposes the server version, which may help attackers identify and exploit known vulnerabilities for the disclosed software versions.

HCL MyCloud was affected with a weak password policy, increasing the risk of account compromise through brute-force or credential-based attacks.