« Volver al listado

CVE-2020-4102

Estado: ModificadaMedia (6.7)—

HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute attacker-controlled code on the client system.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Hcltech — Notes

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-4102",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@hcl.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "HCL Notes",
          "versions": [
            {
              "status": "affected",
              "version": "v9"
            },
            {
              "status": "affected",
              "version": "v10"
            },
            {
              "status": "affected",
              "version": "v11"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-12-02T01:15:12.903",
  "references": [
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085499",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@hcl.com"
    },
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085499",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute attacker-controlled code on the client system."
    },
    {
      "lang": "es",
      "value": "HCL Notes es susceptible a una vulnerabilidad de Desbordamiento de Búfer en DXL debido a una comprobación inapropiada de la entrada de usuario. Una explotación con éxito podría permitir a un atacante bloquear Notes o ejecutar código controlado por el atacante en el sistema cliente"
    }
  ],
  "lastModified": "2026-06-17T03:19:33.387",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "071126BF-BD0E-4134-B5D2-81DC9A37CD9A",
              "versionEndIncluding": "9.0.1",
              "versionStartIncluding": "9.0.0"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:notes:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3C46D23-F52D-46D7-973B-FEF916ECD181"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:notes:10.0.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "847B0ACB-6B84-4D45-B30F-A930A226E14D"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:notes:10.0.1:fp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E36EE406-5355-422B-B1AE-6349DCDBF872"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:notes:10.0.1:fp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFA1279C-D6E4-47D4-9D40-F39EC9C31E12"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:notes:10.0.1:fp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F0771C5-5F44-4563-BEFF-0DCEABE5452A"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:notes:10.0.1:fp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "980BB9E6-810B-4288-8667-0291BFFDCB9D"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:notes:10.0.1:fp5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BECE3D7-F8C4-4065-8CCC-E9CF70CD6943"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:notes:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06AD0ACF-704C-4BBE-9059-1A1E9008D7A4"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:notes:11.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FBE658FD-FD4C-4BB8-9AD7-6AB40AB1BDC2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@hcl.com"
}