VYPR
Medium severity5.3NVD Advisory· Published May 6, 2020· Updated Jun 17, 2026

CVE-2020-4092

CVE-2020-4092

Description

"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expose sensitive information including but not limited to server names, user IDs and document content."

Affected products

17
  • HCLTech/Hcl Nomad15 versions
    cpe:2.3:a:hcltech:hcl_nomad:1.0.1:*:*:*:*:android:*:*+ 14 more
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.1:*:*:*:*:android:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.1:*:*:*:*:iphone_os:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.2:*:*:*:*:android:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.2:*:*:*:*:iphone_os:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.3:*:*:*:*:android:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.3:*:*:*:*:iphone_os:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.4:*:*:*:*:android:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.4:*:*:*:*:iphone_os:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.5:*:*:*:*:android:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.5:*:*:*:*:iphone_os:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.6:*:*:*:*:iphone_os:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.7:*:*:*:*:iphone_os:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0.8:*:*:*:*:iphone_os:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0:*:*:*:*:android:*:*
    • cpe:2.3:a:hcltech:hcl_nomad:1.0:*:*:*:*:iphone_os:*:*
  • HCL/Domino Serverdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.