Yüksek CVSS 8.2
CVE-2026-35149: Dfx Server: güvenlik açığı
Açıklama (NVD)
HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the application without verification.
Özet bilgiler
- Ürün
- Hcltech Dfx Server
- CVSS v3.1
- 8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - EPSS
- %0,42 (yüzdelik 36)
- CWE
- CWE-294
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| hcltech-dfx-server | — | 2.5 | — |