PT-2020-13947 · Hcl · Hcl Notes

Published 2020-12-17 · Updated 2020-12-21 · CVE-2020-14232

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HCL Notes version 9

Description A vulnerability in the input parameter handling could potentially be exploited by an authenticated attacker, resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system, which would execute with the privileges of the currently logged in user.

Recommendations For HCL Notes version 9, update to a version that includes a fix for the input parameter handling vulnerability to prevent potential exploitation.

Fix

Related Identifiers

CVE-2020-14232

Affected Products

Hcl Notes

References · 5

• https://osv.dev/vulnerability/CVE-2020-14232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14232 · Security Note
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085883 · Vendor Advisory
• https://t.me/cvenotify/7504 · Telegram Post
• https://t.me/cibsecurity/21029 · Telegram Post