Hcltechsw Onetest Performance
3 CVEs affecting Hcltechsw Onetest Performance. Latest disclosed: 2021-02-04. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-14245 | Critical | 9.8 | 2021-02-04 | HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant… |
CVE-2020-14246 | High | 7.5 | 2021-02-04 | HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials. |
CVE-2020-14247 | Medium | 6.5 | 2021-02-04 | HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID. |