CVE-2020-4092: Medium severity hcl nomad vulnerability
"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expose sensitive information including but not limited to server names, user IDs and document content."
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-4092.
What is the severity of CVE-2020-4092?
The severity of CVE-2020-4092 is medium with a CVSS score of 5.3.
Which software is affected by CVE-2020-4092?
HCL Nomad on Android and iOS Platforms version 1.0 through 1.0.8 is affected by CVE-2020-4092.
What is the impact of CVE-2020-4092?
If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text, potentially exposing sensitive information.
Is there a user interface option to change the setting to request an encrypted communication channel with the Domino server?
Currently, HCL Nomad on Android and iOS Platforms does not have a user interface option to change the setting to request an encrypted communication channel with the Domino server.