{"containers": {"cna": {"affected": [{"product": "HCL Domino", "vendor": "n/a", "versions": [{"status": "affected", "version": "v9.0.1 FP10 IF6, v10.0.1 FP6, v11.0.1 FP1"}]}], "descriptions": [{"lang": "en", "value": "HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later."}], "problemTypes": [{"descriptions": [{"description": "Lockout policy bypass", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-11-30T23:46:22", "orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@hcl.com", "ID": "CVE-2020-4129", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HCL Domino", "version": {"version_data": [{"version_value": "v9.0.1 FP10 IF6, v10.0.1 FP6, v11.0.1 FP1"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Lockout policy bypass"}]}]}, "references": {"reference_data": [{"name": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407", "refsource": "MISC", "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T07:52:20.935Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407"}]}]}, "cveMetadata": {"assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "assignerShortName": "HCL", "cveId": "CVE-2020-4129", "datePublished": "2020-11-30T23:46:22", "dateReserved": "2019-12-30T00:00:00", "dateUpdated": "2024-08-04T07:52:20.935Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:hcl_domino:*:*:*:*:*:*:*:*", "matchCriteriaId": "EF002666-622E-44FA-A987-7428967ACC6F", "versionEndExcluding": "9.0.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0B08786-69E1-42C4-BED1-821D49585827", "versionEndExcluding": "10.0.1", "versionStartIncluding": "10.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:*:*:*:*:*:*:*:*", "matchCriteriaId": "EE147897-9644-4ACE-B984-6EBB5ECE110F", "versionEndExcluding": "11.0.1", "versionStartIncluding": "11.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:9.0.1:feature_pack_10_interim_fix_2:*:*:*:*:*:*", "matchCriteriaId": "FD1AA146-F06D-45F1-91AF-E7AF00D7EBCD", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:9.0.1:feature_pack_10_interim_fix_3:*:*:*:*:*:*", "matchCriteriaId": "52E2DEA6-DCF9-42CE-97F5-7585578F8BB4", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:9.0.1:feature_pack_10_interim_fix_4:*:*:*:*:*:*", "matchCriteriaId": "7F35BA12-D165-44EF-9050-68DF0FCA75A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:9.0.1:feature_pack_10_interim_fix_5:*:*:*:*:*:*", "matchCriteriaId": "037371DC-B952-4956-BD9B-B2931C3879AA", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:10.0.1:fixpack1:*:*:*:*:*:*", "matchCriteriaId": "C53F4B12-6693-47BE-90DD-7357D6873926", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:10.0.1:fixpack2:*:*:*:*:*:*", "matchCriteriaId": "EFB8DCB2-2369-4E23-A1E6-E9567924439C", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:10.0.1:fixpack3:*:*:*:*:*:*", "matchCriteriaId": "85AEAD6F-6408-416A-9F20-3B01C940B991", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:10.0.1:fixpack4:*:*:*:*:*:*", "matchCriteriaId": "C5C0517A-051A-4B3B-A112-8E4382A1B009", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_domino:10.0.1:fixpack5:*:*:*:*:*:*", "matchCriteriaId": "B53C9F61-BDC9-40AA-92B0-07FAEB7BBFFA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later."}, {"lang": "es", "value": "HCL Domino es susceptible a una vulnerabilidad de omisi\u00f3n de la pol\u00edtica de bloqueo en el servicio LDAP. Un atacante no autenticado podr\u00eda utilizar esta vulnerabilidad para montar un ataque de fuerza bruta contra el servicio LDAP. Las correcciones est\u00e1n disponibles en HCL Domino versiones 9.0.1 FP10 IF6, 10.0.1 FP6 y 11.0.1 FP1 y posteriores"}], "id": "CVE-2020-4129", "lastModified": "2024-11-21T05:32:18.200", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-12-01T00:15:11.257", "references": [{"source": "psirt@hcl.com", "tags": ["Vendor Advisory"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407"}], "sourceIdentifier": "psirt@hcl.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}