CVE-2020-14246

Name of the Vulnerable Software and Affected Versions HCL OneTest Performance versions 9.5 through 10.1

Description The issue is related to the use of basic authentication in HCL OneTest Performance, which is considered relatively weak. An attacker could potentially decode the encoded credentials.

Recommendations For versions 9.5 through 10.1, consider disabling basic authentication until a more secure method is implemented. As a temporary workaround, restrict access to sensitive areas of the application to minimize the risk of exploitation. Avoid using basic authentication for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.