CVE-2026-56453

HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can intercept and alter the contents of the server's HTTP responses before they reach the client application, allowing them to manipulate the authentication or authorization logic to bypass controls and gain unauthorized access to targeted user accounts.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.3 / Impact : 3.7

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:dfxanalytics:*:*:*:*:*:*:*:*

History

24 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) HCL DFXAnalytics se ve afectado por una vulnerabilidad de toma de control de cuenta a través de manipulación de respuesta. Un atacante remoto puede interceptar y alterar el contenido de las respuestas HTTP del servidor antes de que lleguen a la aplicación cliente, lo que les permite manipular la lógica de autenticación o autorización para eludir controles y obtener acceso no autorizado a cuentas de usuario objetivo.

Information

Published : 2026-07-16 14:16

Updated : 2026-10-24 21:10

NVD link : CVE-2026-56453

Mitre link : CVE-2026-56453

CVE.ORG link : CVE-2026-56453

JSON object : View

Products Affected

hcltech

dfxanalytics

CWE

CWE-294

Authentication Bypass by Capture-replay

{"id": "CVE-2026-56453", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-56453", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-16T13:42:25.544927Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 1.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "DFXAnalytics", "versions": [{"status": "affected", "version": "version 3.0 and below"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-16T14:16:54.497", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-294"}]}], "descriptions": [{"lang": "en", "value": "HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can intercept and alter the contents of the server's HTTP responses before they reach the client application, allowing them to manipulate the authentication or authorization logic to bypass controls and gain unauthorized access to targeted user accounts."}, {"lang": "es", "value": "HCL DFXAnalytics se ve afectado por una vulnerabilidad de toma de control de cuenta a trav\u00e9s de manipulaci\u00f3n de respuesta. Un atacante remoto puede interceptar y alterar el contenido de las respuestas HTTP del servidor antes de que lleguen a la aplicaci\u00f3n cliente, lo que les permite manipular la l\u00f3gica de autenticaci\u00f3n o autorizaci\u00f3n para eludir controles y obtener acceso no autorizado a cuentas de usuario objetivo."}], "lastModified": "2026-10-24T21:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:dfxanalytics:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31591778-5688-42DF-B427-9D401C4D2DB5", "versionEndIncluding": "3.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}