CVE-2020-14247

Name of the Vulnerable Software and Affected Versions HCL OneTest Performance versions 9.5 through 10.1

Description The issue is related to an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID.

Recommendations For versions 9.5 through 10.1, consider implementing a more secure session timeout mechanism to minimize the risk of session ID guessing. As a temporary workaround, restrict access to sensitive areas of the application that rely on session IDs until a more secure timeout mechanism is implemented. Avoid using predictable or easily guessable session IDs in the affected versions until the issue is resolved.