PT-2022-18482 · Hcl · Hcl Notes

Published 2022-08-29 · Updated 2022-09-01 · CVE-2022-27558

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL iNotes (affected versions not specified)

Description The issue concerns a Broken Password Strength Checks problem. Custom password policies are not enforced on certain iNotes forms, which could allow users to set weak passwords. This weakness can lead to easier password cracking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2022-27558

Affected Products

Hcl Notes

References · 4

• https://osv.dev/vulnerability/CVE-2022-27558 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27558 · Security Note
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100217 · Vendor Advisory
• https://t.me/cibsecurity/48992 · Telegram Post