5.3
CVE-2020-4129
- EPSS 0.32%
- Veröffentlicht 01.12.2020 00:15:11
- Zuletzt bearbeitet 21.11.2024 05:32:18
- Quelle psirt@hcl.com
- Teams Watchlist Login
- Unerledigt Login
HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Hcl Domino Version < 9.0.1
Hcltech ≫ Hcl Domino Version >= 10.0.0 < 10.0.1
Hcltech ≫ Hcl Domino Version >= 11.0.0 < 11.0.1
Hcltech ≫ Hcl Domino Version9.0.1 Updatefeature_pack_10_interim_fix_2
Hcltech ≫ Hcl Domino Version9.0.1 Updatefeature_pack_10_interim_fix_3
Hcltech ≫ Hcl Domino Version9.0.1 Updatefeature_pack_10_interim_fix_4
Hcltech ≫ Hcl Domino Version9.0.1 Updatefeature_pack_10_interim_fix_5
Hcltech ≫ Hcl Domino Version10.0.1 Updatefixpack1
Hcltech ≫ Hcl Domino Version10.0.1 Updatefixpack2
Hcltech ≫ Hcl Domino Version10.0.1 Updatefixpack3
Hcltech ≫ Hcl Domino Version10.0.1 Updatefixpack4
Hcltech ≫ Hcl Domino Version10.0.1 Updatefixpack5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.32% | 0.519 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|