Files
vuln-nvd/data/2020/CVE-2020-4097.json
T

2 lines
8.3 KiB
JSON

{"affected":[{"affectedData":[{"product":"HCL Notes","vendor":"n/a","versions":[{"status":"affected","version":"HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1"}]}],"source":"psirt@hcl.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*","matchCriteriaId":"0A110FE5-0ABF-454F-A239-370CDE59F615","versionEndIncluding":"9.0.1","versionStartIncluding":"9.0","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*","matchCriteriaId":"EEA4FBF5-4DD8-465C-A43F-214F0A75FC54","versionEndIncluding":"11.0.1","versionStartIncluding":"11.0","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp10:*:*:*:*:*:*","matchCriteriaId":"2C984E7E-ADF7-4F52-9CE1-A6F1E05A4140","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp10if1:*:*:*:*:*:*","matchCriteriaId":"DAD49650-9091-4706-9CAF-51BABDFB94CC","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp10if2:*:*:*:*:*:*","matchCriteriaId":"6CE02BCC-5280-4065-8CD9-0BC2A2821335","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp10if3:*:*:*:*:*:*","matchCriteriaId":"CF1C4C44-7B5E-4405-9F49-B85957E88760","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp10if4:*:*:*:*:*:*","matchCriteriaId":"8CAA8D2D-7A27-49B5-87D2-740E6EB286A6","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp10if5:*:*:*:*:*:*","matchCriteriaId":"A5778563-769B-40A2-8830-E64A5F18CE3C","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp10if6:*:*:*:*:*:*","matchCriteriaId":"6B69E327-0C81-4233-9791-DD50F66E9293","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp10if7:*:*:*:*:*:*","matchCriteriaId":"331AD3B5-8D54-469A-873C-73AF93BC35DF","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp1if1:*:*:*:*:*:*","matchCriteriaId":"2C8AF686-0BD4-4961-B924-481E328F67B7","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp1if2:*:*:*:*:*:*","matchCriteriaId":"E035716B-05DD-4948-BD13-77F9CDA135E9","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp2if1:*:*:*:*:*:*","matchCriteriaId":"35A89BAC-438D-4A9E-8FCD-B0D4CD03ED23","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp2if2:*:*:*:*:*:*","matchCriteriaId":"98498BC3-0A35-446A-8BDC-562EF02E037E","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp2if3:*:*:*:*:*:*","matchCriteriaId":"D78AA096-1E76-4B24-B17D-9796E49B0D0E","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp2if4:*:*:*:*:*:*","matchCriteriaId":"BB478F5B-E6C1-48B2-A0AB-25790E26272A","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp3if1:*:*:*:*:*:*","matchCriteriaId":"8041656D-55C6-4932-AA1F-77D9B1A22C80","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp3if2:*:*:*:*:*:*","matchCriteriaId":"2266AD0F-D804-4BFC-B8E9-050F6AE6C9AA","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp3if3:*:*:*:*:*:*","matchCriteriaId":"750709DB-28CC-49B2-98E4-0C4167705487","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp3if4:*:*:*:*:*:*","matchCriteriaId":"96AD0DB0-75C7-4B2C-845C-AC7DE89A8F1E","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp4if1:*:*:*:*:*:*","matchCriteriaId":"2815AB94-D387-4057-AAE9-39336CC4D871","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp4if2:*:*:*:*:*:*","matchCriteriaId":"D19D5B99-E0BA-4E22-BA16-762114EFC89B","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp5if1:*:*:*:*:*:*","matchCriteriaId":"676D3DC9-FAE5-4E46-857B-B3AC5DCD70F2","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp5if2:*:*:*:*:*:*","matchCriteriaId":"3BA224FC-B056-45F2-BF74-8B39F44FE522","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp5if3:*:*:*:*:*:*","matchCriteriaId":"D3F6F4DA-EC68-42C2-93A1-99DBAC00F63B","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp7if1:*:*:*:*:*:*","matchCriteriaId":"3CB80E9D-E53D-4461-A71B-61A1615E9422","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp7if2:*:*:*:*:*:*","matchCriteriaId":"1C65A591-435C-40D0-8512-AE3304AA948B","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp8if1:*:*:*:*:*:*","matchCriteriaId":"3B3F9411-8D5B-43E5-9DA9-E0C615ED7557","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp9if1:*:*:*:*:*:*","matchCriteriaId":"76E45481-36F9-4522-91A4-4D3FD9F6AB6C","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:9.0.1:fp9if2:*:*:*:*:*:*","matchCriteriaId":"A177BC67-EBE8-4487-BC45-D42ED6AFA3B7","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.0:fp1:*:*:*:*:*:*","matchCriteriaId":"A3604A97-5374-4589-BB9A-FFDE47AEB3D4","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.0:fp2:*:*:*:*:*:*","matchCriteriaId":"AC8C1C00-B486-4651-9213-DA3B07E61F33","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.0:fp3:*:*:*:*:*:*","matchCriteriaId":"E7BBFB47-2B3B-4839-8785-27707C020337","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.0:fp4:*:*:*:*:*:*","matchCriteriaId":"D50A2795-6DFE-4963-ACC5-E5D78E96F29C","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.0:fp5:*:*:*:*:*:*","matchCriteriaId":"3694E067-3330-4905-891E-9B46AE2C2B19","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:fp1:*:*:*:*:*:*","matchCriteriaId":"E36EE406-5355-422B-B1AE-6349DCDBF872","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:fp2:*:*:*:*:*:*","matchCriteriaId":"CFA1279C-D6E4-47D4-9D40-F39EC9C31E12","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4F0771C5-5F44-4563-BEFF-0DCEABE5452A","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:fp4:*:*:*:*:*:*","matchCriteriaId":"980BB9E6-810B-4288-8667-0291BFFDCB9D","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:fp5:*:*:*:*:*:*","matchCriteriaId":"8BECE3D7-F8C4-4065-8CCC-E9CF70CD6943","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a buffer overflow. This could enable an attacker to crash HCL Notes or execute attacker-controlled code on the client."},{"lang":"es","value":"En HCL Notes versión 9 anterior a la versión 9.0.1 FixPack 10 Interim Fix 8, versión 10 anterior a versión 10.0.1 FixPack 6 y versión 11 anterior a 11.0.1 FixPack 1, una vulnerabilidad en el manejo del parámetro de entrada del cliente Notes podría potencialmente ser explotado por un atacante resultando en un desbordamiento del búfer. Esto podría permitir a un atacante bloquear HCL Notes o ejecutar código controlado por el atacante en el cliente"}],"id":"CVE-2020-4097","lastModified":"2026-06-17T03:19:32.923","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.6,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":3.9,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-11-05T17:15:12.537","references":[{"source":"psirt@hcl.com","tags":["Vendor Advisory"],"url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084796"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084796"}],"sourceIdentifier":"psirt@hcl.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-120"}],"source":"nvd@nist.gov","type":"Primary"}]}