CVEvulnerability

CVE-2020-4127

6.5 MEDIUM Published 2020-11-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-352

Description

HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user's system to access internal systems from the internet. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.

Affected configurations

• hcltech hcl domino (< 9.0.1) • hcltech hcl domino (>= 10.0.0 < 10.0.1) • hcltech hcl domino (>= 11.0.0 < 11.0.1) • hcltech hcl domino 9.0.1 • hcltech hcl domino 10.0.1

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References