Vulnerability · Published May 19, 2022 · Assigned by HCL
CVE-2020-4107HCL Domino is affected by an Insufficient Access Control vulnerability
High 8.8
In plain English
A high-severity improper access control in HCL Domino from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.2%top 84.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | HCL Domino | 9, 10 and 11 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H