CVE-2020-14245

HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
HCLCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
VendorProductVersion
hcltechswonetest_performance
9.5.0
hcltechswonetest_performance
10.0.0
hcltechswonetest_performance
10.0.1
hcltechswonetest_performance
10.0.2
hcltechswonetest_performance
10.1.0
hcltechswonetest_performance
10.1.1
hcltechswonetest_performance
10.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086622
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086622