Design/Logic Flaw

2020-12-0100:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.

CPENameOperatorVersion
hcl_dominolt9.0.1
hcl_dominoeq9.0.1 featurepack10interimfix2
hcl_dominoeq9.0.1 featurepack10interimfix3
hcl_dominoeq9.0.1 featurepack10interimfix4
hcl_dominoeq9.0.1 featurepack10interimfix5
hcl_dominoge10.0.0
hcl_dominolt10.0.1
hcl_dominoeq10.0.1 fixpack1
hcl_dominoeq10.0.1 fixpack2
hcl_dominoeq10.0.1 fixpack3

Name	Operator	Version
hcl_domino	lt	9.0.1
hcl_domino	eq	9.0.1 featurepack10interimfix2
hcl_domino	eq	9.0.1 featurepack10interimfix3
hcl_domino	eq	9.0.1 featurepack10interimfix4
hcl_domino	eq	9.0.1 featurepack10interimfix5
hcl_domino	ge	10.0.0
hcl_domino	lt	10.0.1
hcl_domino	eq	10.0.1 fixpack1
hcl_domino	eq	10.0.1 fixpack2
hcl_domino	eq	10.0.1 fixpack3