{"containers": {"cna": {"affected": [{"product": "HCL Domino", "vendor": "n/a", "versions": [{"status": "affected", "version": "v9"}, {"status": "affected", "version": "v10"}, {"status": "affected", "version": "v11"}]}], "descriptions": [{"lang": "en", "value": "HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the ID Vault service."}], "problemTypes": [{"descriptions": [{"description": "\"Lockout policy bypass \"", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-12-01T13:12:37.000Z", "orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@hcl.com", "ID": "CVE-2020-4128", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HCL Domino", "version": {"version_data": [{"version_value": "v9"}, {"version_value": "v10"}, {"version_value": "v11"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the ID Vault service."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "\"Lockout policy bypass \""}]}]}, "references": {"reference_data": [{"name": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408", "refsource": "MISC", "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T07:52:20.922Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408"}]}]}, "cveMetadata": {"assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "assignerShortName": "HCL", "cveId": "CVE-2020-4128", "datePublished": "2020-12-01T13:12:37.000Z", "dateReserved": "2019-12-30T00:00:00.000Z", "dateUpdated": "2024-08-04T07:52:20.922Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*", "matchCriteriaId": "E912DDC2-BF25-4D5D-B1AF-86742A4137B1", "versionEndIncluding": "9.0.1", "versionStartIncluding": "9.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*", "matchCriteriaId": "DDAF258F-BF11-4A8D-9211-BA6E79682BCA", "versionEndIncluding": "10.0.1", "versionStartIncluding": "10.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*", "matchCriteriaId": "F3A5C76D-53EC-49BA-A956-F2CF54F83661", "versionEndIncluding": "11.0.1", "versionStartIncluding": "11.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:domino:10.0.1:-:*:*:*:*:*:*", "matchCriteriaId": "EC5EB2B8-9B48-4E9B-9726-71E4A6CCFA99", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_1:*:*:*:*:*:*", "matchCriteriaId": "10824FE5-1BCB-422A-8EFD-AE170C78FB43", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_2:*:*:*:*:*:*", "matchCriteriaId": "985D72C3-3149-4DC1-85FA-C681CF779050", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_3:*:*:*:*:*:*", "matchCriteriaId": "8688C462-C24D-4E68-B2A1-488E20396DE5", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_4:*:*:*:*:*:*", "matchCriteriaId": "64D65B08-CAB2-4FC5-9261-4303EF796BCF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the ID Vault service."}, {"lang": "es", "value": "HCL Domino, es susceptible a una vulnerabilidad de omisi\u00f3n de pol\u00edticas de bloqueo en el servicio ID Vault. Un atacante no autenticado podr\u00eda usar esta vulnerabilidad para montar un ataque de fuerza bruta contra el servicio ID Vault"}], "id": "CVE-2020-4128", "lastModified": "2024-11-21T05:32:18.100", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-12-01T14:15:11.770", "references": [{"source": "psirt@hcl.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408"}], "sourceIdentifier": "psirt@hcl.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}