Cross site request forgery (csrf)

2020-11-3022:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.1%

JSON

HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user’s system to access internal systems from the internet. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.

CPENameOperatorVersion
hcl_dominolt9.0.1
hcl_dominoeq9.0.1 featurepack10interimfix2
hcl_dominoeq9.0.1 featurepack10interimfix3
hcl_dominoeq9.0.1 featurepack10interimfix4
hcl_dominoeq9.0.1 featurepack10interimfix5
hcl_dominoge10.0.0
hcl_dominolt10.0.1
hcl_dominoeq10.0.1 fixpack1
hcl_dominoeq10.0.1 fixpack2
hcl_dominoeq10.0.1 fixpack3

Name	Operator	Version
hcl_domino	lt	9.0.1
hcl_domino	eq	9.0.1 featurepack10interimfix2
hcl_domino	eq	9.0.1 featurepack10interimfix3
hcl_domino	eq	9.0.1 featurepack10interimfix4
hcl_domino	eq	9.0.1 featurepack10interimfix5
hcl_domino	ge	10.0.0
hcl_domino	lt	10.0.1
hcl_domino	eq	10.0.1 fixpack1
hcl_domino	eq	10.0.1 fixpack2
hcl_domino	eq	10.0.1 fixpack3