CVEvulnerability

CVE-2020-4089

6.5 MEDIUM Published 2020-06-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N

Description

HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected.

Affected configurations

• hcltech notes 9.0 • hcltech notes 10.0 • hcltech notes 11.0

References