CVE-2026-35141

HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit valid authentication data to achieve unauthorized access. To mitigate this risk, the application must implement a mechanism to include timestamps with every message, ensuring that messages exceeding a specific age threshold are automatically rejected by the recipient system.

Score
CVSS 3.1 5.3 Medium
Status
Analyzed - psirt@hcl.com
Published
2026-07-16
Last modified
2026-10-24
Weaknesses
CWE-294

Affected products

References

 
 
© AVABIS GmbH privacypolicy about