Authentication flaw

2021-02-0407:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources.

CPENameOperatorVersion
onetest_performanceeq10.0.1
onetest_performanceeq10.0.2
onetest_performanceeq10.0.0
onetest_performanceeq9.5.0
onetest_performanceeq10.1.1
onetest_performanceeq10.1.2
onetest_performanceeq10.1.0

Name	Operator	Version
onetest_performance	eq	10.0.1
onetest_performance	eq	10.0.2
onetest_performance	eq	10.0.0
onetest_performance	eq	9.5.0
onetest_performance	eq	10.1.1
onetest_performance	eq	10.1.2
onetest_performance	eq	10.1.0

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086622