CVE-2020-4129

CVE-2020-4129 affects HCL Domino LDAP service, describing a lockout policy bypass that allows unauthenticated brute-force attempts against the LDAP service. The issue is tied to the LDAP authentication/lockout mechanism, enabling rapid guessing if not mitigated. According to the sources, fixes ex...

CVE-2020-4127

HCL Domino is affected by a Login CSRF vulnerability (CVE-2020-4127). The issue could enable an attacker to trick an authenticated user into accessing a system under another ID or expose internal systems from the internet via the intranet user’s session. Public documents identify the affected pro...