CVE-2020-4129

Published: Dec 1, 2020Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.

Affected (12)

Products: Hcltech: Hcl Domino

Hcltech

1 product

Hcl Domino

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Hcltech Hcl Domino	version < 9.0.1
Hcltech Hcl Domino	10.0.0 ≤ version < 10.0.1
Hcltech Hcl Domino	11.0.0 ≤ version < 11.0.1
Hcltech Hcl Domino	Version 10.0.1 fixpack1
Hcltech Hcl Domino	Version 10.0.1 fixpack2
Hcltech Hcl Domino	Version 10.0.1 fixpack3
Hcltech Hcl Domino	Version 10.0.1 fixpack4
Hcltech Hcl Domino	Version 10.0.1 fixpack5
Hcltech Hcl Domino	Version 9.0.1 feature_pack_10_interim_fix_2
Hcltech Hcl Domino	Version 9.0.1 feature_pack_10_interim_fix_3
Hcltech Hcl Domino	Version 9.0.1 feature_pack_10_interim_fix_4
Hcltech Hcl Domino	Version 9.0.1 feature_pack_10_interim_fix_5

References (2)

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407

Source: psirt@hcl.com

Vendor Advisory

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085407

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.