PT-2020-17884 · Hcl · Hcl Domino

Published 2020-11-30 · Updated 2020-12-02 · CVE-2020-4129

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL Domino versions prior to 9.0.1 FP10 IF6 HCL Domino versions prior to 10.0.1 FP6 HCL Domino versions prior to 11.0.1 FP1

Description HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service.

Recommendations For versions prior to 9.0.1 FP10 IF6, update to version 9.0.1 FP10 IF6 or later. For versions prior to 10.0.1 FP6, update to version 10.0.1 FP6 or later. For versions prior to 11.0.1 FP1, update to version 11.0.1 FP1 or later.

Fix

Related Identifiers

CVE-2020-4129

Affected Products

Hcl Domino

References · 4

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4129 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4129 · Security Note
• https://t.me/cibsecurity/16961 · Telegram Post