Lucene search

[email protected]CVE-2020-4097

HistoryNov 05, 2020 - 5:15 p.m.

CVE-2020-4097

2020-11-0517:15:12

CWE-120

[email protected]

web.nvd.nist.gov

cve-2020-4097

hcl notes

vulnerability

input parameter handling

buffer overflow

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

JSON

In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a buffer overflow. This could enable an attacker to crash HCL Notes or execute attacker-controlled code on the client.

Affected configurations

NVD

Node

hcltechnotesRange9.0–9.0.1

hcltechnotesRange11.0–11.0.1

hcltechnotesMatch9.0.1fp10

hcltechnotesMatch9.0.1fp10if1

hcltechnotesMatch9.0.1fp10if2

hcltechnotesMatch9.0.1fp10if3

hcltechnotesMatch9.0.1fp10if4

hcltechnotesMatch9.0.1fp10if5

hcltechnotesMatch9.0.1fp10if6

hcltechnotesMatch9.0.1fp10if7

hcltechnotesMatch9.0.1fp1if1

hcltechnotesMatch9.0.1fp1if2

hcltechnotesMatch9.0.1fp2if1

hcltechnotesMatch9.0.1fp2if2

hcltechnotesMatch9.0.1fp2if3

hcltechnotesMatch9.0.1fp2if4

hcltechnotesMatch9.0.1fp3if1

hcltechnotesMatch9.0.1fp3if2

hcltechnotesMatch9.0.1fp3if3

hcltechnotesMatch9.0.1fp3if4

hcltechnotesMatch9.0.1fp4if1

hcltechnotesMatch9.0.1fp4if2

hcltechnotesMatch9.0.1fp5if1

hcltechnotesMatch9.0.1fp5if2

hcltechnotesMatch9.0.1fp5if3

hcltechnotesMatch9.0.1fp7if1

hcltechnotesMatch9.0.1fp7if2

hcltechnotesMatch9.0.1fp8if1

hcltechnotesMatch9.0.1fp9if1

hcltechnotesMatch9.0.1fp9if2

hcltechnotesMatch10.0.0fp1

hcltechnotesMatch10.0.0fp2

hcltechnotesMatch10.0.0fp3

hcltechnotesMatch10.0.0fp4

hcltechnotesMatch10.0.0fp5

hcltechnotesMatch10.0.1fp1

hcltechnotesMatch10.0.1fp2

hcltechnotesMatch10.0.1fp3

hcltechnotesMatch10.0.1fp4

hcltechnotesMatch10.0.1fp5

CPENameOperatorVersion
hcltech:noteshcltech notesle9.0.1
hcltech:noteshcltech notesle11.0.1
hcltech:noteshcltech noteseq10.0.0
hcltech:noteshcltech noteseq10.0.1

CPE	Name	Operator	Version
hcltech:notes	hcltech notes	le	9.0.1
hcltech:notes	hcltech notes	le	11.0.1
hcltech:notes	hcltech notes	eq	10.0.0
hcltech:notes	hcltech notes	eq	10.0.1

CNA Affected

[
  {
    "product": "HCL Notes",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084796

Social References

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

JSON

Related for CVE-2020-4097

prion1 nvd1 cvelist1