NetSight
medium5.9

CVE-2022-27558

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.

Impact

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.

Affected products

VendorProductAffected versions
HcltechDomino
Version 12.0.1
HcltechHcl Inotes
Version 12.0.1

Weakness classification

References