CVE-2020-14246: High severity hcl tech onetest performance vulnerability

Published Feb 4, 2021

Updated

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials.

Affected Software

3 affected components

Hcltechsw Onetest Performance=9.5.0

Hcltechsw Onetest Performance=10.0.0

Hcltechsw Onetest Performance=10.1.0

Event History

Feb 4, 2021

CVE Published

via MITRE·06:45 AM

Data Sourced

via MITRE·06:45 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-14246?

CVE-2020-14246 is a vulnerability in HCL OneTest Performance V9.5, V10.0, V10.1 that uses basic authentication which is relatively weak, potentially allowing an attacker to decode the encoded credentials.

How does CVE-2020-14246 affect HCL OneTest Performance?

CVE-2020-14246 affects HCL OneTest Performance V9.5, V10.0, V10.1 by using basic authentication, which is considered relatively weak and could be decoded by an attacker.

What is the severity of CVE-2020-14246?

The severity of CVE-2020-14246 is high with a score of 7.5.

How can I fix CVE-2020-14246?

To fix CVE-2020-14246, it is recommended to implement stronger authentication mechanisms, such as multi-factor authentication, in HCL OneTest Performance V9.5, V10.0, and V10.1.

Where can I find more information about CVE-2020-14246?

For more information about CVE-2020-14246, you can visit the following link: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086470