CVE-2026-35141
LowCVSS 2.6Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. A remote attacker can intercept, delay, or fraudulently retransmit valid authentication data to achieve unauthorized access.
Risk Assessment
The risk involves an attacker replaying authentication data to gain unauthorized access, potentially compromising sensitive analytical data and system confidentiality.
Recommendation
Implement a mechanism to include timestamps with every authentication message and reject messages exceeding a specific age threshold.
Original NVD description (English source)
HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit valid authentication data to achieve unauthorized access. To mitigate this risk, the application must implement a mechanism to include timestamps with every message, ensuring that messages exceeding a specific age threshold are automatically rejected by the recipient system.