7.5

CVE-2020-14246

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltechsw ≫ Onetest Performance Version 9.5.0
Hcltechsw ≫ Onetest Performance Version 10.0.0
Hcltechsw ≫ Onetest Performance Version 10.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.69% 0.478
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086470
Vendor Advisory