« Volver al listado

CVE-2020-4129

Estado: ModificadaMedia (5.3)—

HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Hcltech — HCL Domino

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-4129",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@hcl.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "HCL Domino",
          "versions": [
            {
              "status": "affected",
              "version": "v9.0.1 FP10 IF6, v10.0.1 FP6, v11.0.1 FP1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-12-01T00:15:11.257",
  "references": [
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@hcl.com"
    },
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later."
    },
    {
      "lang": "es",
      "value": "HCL Domino es susceptible a una vulnerabilidad de omisión de la política de bloqueo en el servicio LDAP. Un atacante no autenticado podría utilizar esta vulnerabilidad para montar un ataque de fuerza bruta contra el servicio LDAP. Las correcciones están disponibles en HCL Domino versiones 9.0.1 FP10 IF6, 10.0.1 FP6 y 11.0.1 FP1 y posteriores"
    }
  ],
  "lastModified": "2026-06-17T03:19:34.090",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF002666-622E-44FA-A987-7428967ACC6F",
              "versionEndExcluding": "9.0.1"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0B08786-69E1-42C4-BED1-821D49585827",
              "versionEndExcluding": "10.0.1",
              "versionStartIncluding": "10.0.0"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE147897-9644-4ACE-B984-6EBB5ECE110F",
              "versionEndExcluding": "11.0.1",
              "versionStartIncluding": "11.0.0"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:9.0.1:feature_pack_10_interim_fix_2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD1AA146-F06D-45F1-91AF-E7AF00D7EBCD"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:9.0.1:feature_pack_10_interim_fix_3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52E2DEA6-DCF9-42CE-97F5-7585578F8BB4"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:9.0.1:feature_pack_10_interim_fix_4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F35BA12-D165-44EF-9050-68DF0FCA75A3"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:9.0.1:feature_pack_10_interim_fix_5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "037371DC-B952-4956-BD9B-B2931C3879AA"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:10.0.1:fixpack1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C53F4B12-6693-47BE-90DD-7357D6873926"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:10.0.1:fixpack2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EFB8DCB2-2369-4E23-A1E6-E9567924439C"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:10.0.1:fixpack3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85AEAD6F-6408-416A-9F20-3B01C940B991"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:10.0.1:fixpack4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5C0517A-051A-4B3B-A112-8E4382A1B009"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:hcl_domino:10.0.1:fixpack5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B53C9F61-BDC9-40AA-92B0-07FAEB7BBFFA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@hcl.com"
}