CVE-2020-14245

2021-02-0406:38:25

HCL

www.cve.org

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources.

CNA Affected

[
  {
    "product": "HCL OneTest UI",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V9.5"
      },
      {
        "status": "affected",
        "version": "V10.0"
      },
      {
        "status": "affected",
        "version": "V10.1"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086622