PT-2020-17882 · Hcl · Hcl Domino

Published 2020-11-30 · Updated 2020-12-04 · CVE-2020-4127

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL Domino versions prior to 9.0.1 FP10 IF6 HCL Domino versions prior to 10.0.1 FP6 HCL Domino versions prior to 11.0.1 FP1

Description HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user's system to access internal systems from the internet.

Recommendations For versions prior to 9.0.1 FP10 IF6, update to version 9.0.1 FP10 IF6 or later. For versions prior to 10.0.1 FP6, update to version 10.0.1 FP6 or later. For versions prior to 11.0.1 FP1, update to version 11.0.1 FP1 or later.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-4127

Affected Products

Hcl Domino

References · 4

• https://osv.dev/vulnerability/CVE-2020-4127 · Vendor Advisory
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085409 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4127 · Security Note
• https://t.me/cibsecurity/16957 · Telegram Post