Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-30150 EUVD-2024-28086GHSA-rpm8-r6fr-56f4

An unauthenticated privilege escalation vulnerability affects HCL MyCloud

Published Feb 25, 2025 · Updated Feb 26, 2025 · Assigned by HCL

Description

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery (SSRF) and Denial of Service(DOS) attacks from unauthenticated users.

Affected products

VendorProductAffectedFixed
HCL Software MyCloud 10.8.1 —

References