5.3
CVE-2020-4129
- EPSS 0.93%
- Veröffentlicht 01.12.2020 00:15:11
- Zuletzt bearbeitet 21.11.2024 05:32:18
- Erkennungen
HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Hcl Domino Version < 9.0.1
Hcltech ≫ Hcl Domino Version >= 10.0.0 < 10.0.1
Hcltech ≫ Hcl Domino Version >= 11.0.0 < 11.0.1
Hcltech ≫ Hcl Domino Version 9.0.1 Update feature_pack_10_interim_fix_2
Hcltech ≫ Hcl Domino Version 9.0.1 Update feature_pack_10_interim_fix_3
Hcltech ≫ Hcl Domino Version 9.0.1 Update feature_pack_10_interim_fix_4
Hcltech ≫ Hcl Domino Version 9.0.1 Update feature_pack_10_interim_fix_5
Hcltech ≫ Hcl Domino Version 10.0.1 Update fixpack1
Hcltech ≫ Hcl Domino Version 10.0.1 Update fixpack2
Hcltech ≫ Hcl Domino Version 10.0.1 Update fixpack3
Hcltech ≫ Hcl Domino Version 10.0.1 Update fixpack4
Hcltech ≫ Hcl Domino Version 10.0.1 Update fixpack5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.93% | 0.561 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407