Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2025-59870

Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL MyXalytics  is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software MyXalytics

Default version status: unaffected

  • 6.2 to < 6.7affected

References