CVE-2020-14245: Critical severity hcl tech onetest performance vulnerability

Published Feb 4, 2021

Updated

HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources.

Affected Software

7 affected components

Hcltechsw Onetest Performance=9.5.0

Hcltechsw Onetest Performance=10.0.0

Hcltechsw Onetest Performance=10.0.1

Hcltechsw Onetest Performance=10.0.2

Hcltechsw Onetest Performance=10.1.0

Hcltechsw Onetest Performance=10.1.1

Hcltechsw Onetest Performance=10.1.2

Event History

Feb 4, 2021

CVE Published

via MITRE·06:38 AM

Data Sourced

via MITRE·06:38 AM

DescriptionWeakness

Frequently Asked Questions

What is HCL OneTest UI V9.5, V10.0, and V10.1?

HCL OneTest UI V9.5, V10.0, and V10.1 is a software tool for testing user interfaces and functionality of applications.

What is CVE-2020-14245?

CVE-2020-14245 is a vulnerability in HCL OneTest UI V9.5, V10.0, and V10.1 where it does not perform authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

What is the severity of CVE-2020-14245?

CVE-2020-14245 has a severity rating of 9.8 (critical).

How does CVE-2020-14245 affect HCL OneTest UI V9.5, V10.0, and V10.1?

CVE-2020-14245 affects HCL OneTest UI V9.5, V10.0, and V10.1 by not performing authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

How can CVE-2020-14245 be fixed?

To fix CVE-2020-14245, it is recommended to install the necessary updates and patches provided by HCL Technologies.