PT-2020-17873 · Hcl · Hcl Nomad+1

Published 2020-05-06 · Updated 2020-05-12 · CVE-2020-4092

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL Nomad (affected versions not specified)

Description The issue concerns the communication between HCL Nomad on Android and iOS platforms and the Domino Server. If port encryption is not enabled on the Domino Server, HCL Nomad will communicate in clear text. This could potentially expose sensitive information, including server names, user IDs, and document content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2020-4092

Affected Products

Domino Server

Hcl Nomad

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-4092 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4092 · Vendor Advisory
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078969 · Vendor Advisory