Skip to content
OpenAdvisories
Medium · 5.9 CVE-2022-27558 EUVD-2022-32059GHSA-wv5c-7rvw-phjw

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.

Published Aug 29, 2022 · Updated Sep 17, 2024 · Assigned by HCL

Description

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.

Affected products

VendorProductAffectedFixed
HCL Software HCL iNotes 12.0.1, 12.0.1FP1 —

References