Eine nicht authentifizierte Privilegienerweiterung betrifft HCL MyCloud

The Improper Access Control vulnerability in HCL MyCloud allows unauthenticated attackers to bypass security controls and gain elevated privileges within the system. This could enable attackers to access sensitive data, modify configurations, or even execute arbitrary code on the server. The potential for SSRF means an attacker could leverage the MyCloud instance to make requests to internal or external resources, potentially compromising other systems. The DoS potential allows attackers to disrupt service availability, impacting users and business operations. Successful exploitation could lead to a complete compromise of the MyCloud environment, depending on the system's configuration and access controls.

Organizations utilizing HCL MyCloud versions 10.8.1 through 10.8.1, particularly those with exposed MyCloud instances or those lacking robust network segmentation, are at significant risk. Shared hosting environments where multiple tenants share the same MyCloud instance are also particularly vulnerable.

1. 2025-02-25Disclosure

   disclosure

1. Reserviert2024-03-22
2. Veröffentlicht2025-02-25
3. Geändert2025-02-26
4. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-30150 is to upgrade HCL MyCloud to version 10.8.2 or later, which contains the fix for this vulnerability. If an immediate upgrade is not possible, consider implementing temporary workarounds such as restricting network access to the MyCloud instance, implementing stricter authentication controls, and monitoring for suspicious activity. Review and tighten access control lists to limit the potential impact of a successful exploit. Implement a Web Application Firewall (WAF) with rules to detect and block attempts to exploit improper access control vulnerabilities. After upgrading, confirm the fix by attempting to access privileged resources without authentication and verifying access is denied.