VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Dec 1, 2020· Updated Jun 17, 2026

CVE-2020-4128

CVE-2020-4128

Description

HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the ID Vault service.

Affected products

8
  • HCLTech/Domino6 versions
    cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*range: >=9.0.0,<=9.0.1
    • cpe:2.3:a:hcltech:domino:10.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_4:*:*:*:*:*:*
  • HCL/Dominodescription
  • HCL Software/Dominollm-create

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.