First published: Mon Dec 28 2020(Updated: )
HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. An unauthenticated attacker could could exploit this vulnerability to crash the Domino server.
Credit: psirt@hcl.com
Affected Software | Affected Version | How to fix |
---|---|---|
Hcltech Domino | =10.0.1 | |
Hcltech Domino | =10.0.1-fix_pack_1 | |
Hcltech Domino | =10.0.1-fix_pack_2 | |
Hcltech Domino | =10.0.1-fix_pack_3 | |
Hcltech Domino | =10.0.1-fix_pack_4 | |
Hcltech Domino | =10.0.1-fix_pack_5 | |
Hcltech Domino | =11.0.0 | |
Hcltech Domino | =11.0.1 | |
Hcltech Domino | =11.0.1-fix_pack_1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this HCL Domino vulnerability is CVE-2020-14273.
The severity of CVE-2020-14273 is high (7.5).
Versions 10.0.1 to 10.0.1-fix_pack_5 and version 11.0.0 to 11.0.1-fix_pack_1 of HCL Domino are affected by CVE-2020-14273.
CVE-2020-14273 allows an unauthenticated attacker to crash the Domino server through a Denial of Service (DoS) attack.
Yes, a fix is available for CVE-2020-14273. It is recommended to upgrade to HCL Domino version 10.0.1-fix_pack_5 or version 11.0.1-fix_pack_1.