CVE-2020-4128

Published: Dec 1, 2020Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the ID Vault service.

Affected (8)

Products: Hcltech: Domino

Hcltech

1 product

Domino

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Hcltech Domino	From 10.0.0 to 10.0.1
Hcltech Domino	From 11.0.0 to 11.0.1
Hcltech Domino	From 9.0.0 to 9.0.1
Hcltech Domino	Version 10.0.1
Hcltech Domino	Version 10.0.1 fix_pack_1
Hcltech Domino	Version 10.0.1 fix_pack_2
Hcltech Domino	Version 10.0.1 fix_pack_3
Hcltech Domino	Version 10.0.1 fix_pack_4

References (2)

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408

Source: psirt@hcl.com

PatchVendor Advisory

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.