Skip to content
OpenAdvisories
Unscored CVE-2020-4129 EUVD-2020-25376GHSA-qmmq-6cfg-qc67

HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerab…

Published Nov 30, 2020 · Updated Aug 4, 2024 · Assigned by HCL

Description

HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.

Affected products

VendorProductAffectedFixed
— HCL Domino v9.0.1 FP10 IF6, v10.0.1 FP6, v11.0.1 FP1 —

References