2 lines
3.6 KiB
JSON
2 lines
3.6 KiB
JSON
{"affected":[{"affectedData":[{"product":"HCL Domino","vendor":"n/a","versions":[{"status":"affected","version":"v9"},{"status":"affected","version":"v10"},{"status":"affected","version":"v11"}]}],"source":"psirt@hcl.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*","matchCriteriaId":"E912DDC2-BF25-4D5D-B1AF-86742A4137B1","versionEndIncluding":"9.0.1","versionStartIncluding":"9.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*","matchCriteriaId":"DDAF258F-BF11-4A8D-9211-BA6E79682BCA","versionEndIncluding":"10.0.1","versionStartIncluding":"10.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*","matchCriteriaId":"F3A5C76D-53EC-49BA-A956-F2CF54F83661","versionEndIncluding":"11.0.1","versionStartIncluding":"11.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:domino:10.0.1:-:*:*:*:*:*:*","matchCriteriaId":"EC5EB2B8-9B48-4E9B-9726-71E4A6CCFA99","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_1:*:*:*:*:*:*","matchCriteriaId":"10824FE5-1BCB-422A-8EFD-AE170C78FB43","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_2:*:*:*:*:*:*","matchCriteriaId":"985D72C3-3149-4DC1-85FA-C681CF779050","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_3:*:*:*:*:*:*","matchCriteriaId":"8688C462-C24D-4E68-B2A1-488E20396DE5","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_4:*:*:*:*:*:*","matchCriteriaId":"64D65B08-CAB2-4FC5-9261-4303EF796BCF","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the ID Vault service."},{"lang":"es","value":"HCL Domino, es susceptible a una vulnerabilidad de omisión de políticas de bloqueo en el servicio ID Vault. Un atacante no autenticado podría usar esta vulnerabilidad para montar un ataque de fuerza bruta contra el servicio ID Vault"}],"id":"CVE-2020-4128","lastModified":"2026-06-17T03:19:33.993","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-12-01T14:15:11.770","references":[{"source":"psirt@hcl.com","tags":["Patch","Vendor Advisory"],"url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408"}],"sourceIdentifier":"psirt@hcl.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|