CVE-2020-14246

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

CVE-2020-14246

The CVE-2020-14246 entry concerns HCL OneTest Performance (V9.5, V10.0, V10.1) using basic authentication, which can be decoded to reveal credentials. The affected software is HCL OneTest Performance; the root cause is weak basic authentication. Practical impact states that an attacker could deco...

CVE-2020-14247

HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID...

CVE-2020-14247

Summary: CVE-2020-14247 affects HCL OneTest Performance versions 9.5, 10.0 and 10.1. The vulnerability arises from an inadequate session timeout, which could allow an attacker to guess and reuse a valid session ID. What’s affected: HCL OneTest Performance (V9.5, V10.0, V10.1). Root cause: Inadequ...

CVE-2020-14245

HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources...

HCL OneTest code-related vulnerabilities

HCL OneTest is a software testing tool from HCL India that provides multiple testing options. The software supports API testing, functional testing, UI testing, performance testing and service virtualization to support software automation testing. A security vulnerability exists in HCL OneTest...

PT-2021-9705

Name of the Vulnerable Software and Affected Versions HCL OneTest Performance versions 9.5 through 10.1 Description The issue is related to an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID. Recommendations For versions 9.5 through 10.1, conside...

PT-2021-9703

Name of the Vulnerable Software and Affected Versions HCL OneTest UI versions 9.5 through 10.1 Description The issue is related to the lack of authentication for certain functionality that requires a provable user identity or consumes significant resources. Recommendations For versions 9.5 throug...

PT-2021-9704

Name of the Vulnerable Software and Affected Versions HCL OneTest Performance versions 9.5 through 10.1 Description The issue is related to the use of basic authentication in HCL OneTest Performance, which is considered relatively weak. An attacker could potentially decode the encoded credentials...

CVE-2020-14246: Use of a Broken or Risky Cryptographic Algorithm

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

CVE-2020-14245: Missing Authentication for Critical Function

HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources...

CVE-2020-14247: Insufficient Session Expiration

HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID...