7.5
CVE-2020-14246
- EPSS 0.14%
- Veröffentlicht 04.02.2021 07:15:13
- Zuletzt bearbeitet 21.11.2024 05:02:54
- Quelle psirt@hcl.com
- CVE-Watchlists
- Unerledigt
LoginHCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltechsw ≫ Onetest Performance Version9.5.0
Hcltechsw ≫ Onetest Performance Version10.0.0
Hcltechsw ≫ Onetest Performance Version10.1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.14% | 0.307 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.