PT-2020-17878 · Hcl · Hcl Notes

Published 2020-12-02 · Updated 2020-12-04 · CVE-2020-4102

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HCL Notes (affected versions not specified)

Description The issue is related to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash the system or execute attacker-controlled code on the client system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-4102

Affected Products

Hcl Notes

References · 6

• https://osv.dev/vulnerability/CVE-2020-4102 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4102 · Security Note
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085499 · Vendor Advisory
• https://t.me/cvenotify/6433 · Telegram Post
• https://t.me/cvenotify/6414 · Telegram Post
• https://t.me/cvenotify/6615 · Telegram Post