medium5.3
CVE-2020-4129
HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service.
Impact
HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Hcl Domino | before 9.0.1 from 10.0.0 before 10.0.1 from 11.0.0 before 11.0.1 Versions 9.0.1, 10.0.1 |