CVE-2020-4092
First published: Wed May 06 2020(Updated: )
"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expose sensitive information including but not limited to server names, user IDs and document content."
Credit: psirt@hcl.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hcltech Hcl Nomad | =1.0 | |
| Hcltech Hcl Nomad | =1.0 | |
| Hcltech Hcl Nomad | =1.0.1 | |
| Hcltech Hcl Nomad | =1.0.1 | |
| Hcltech Hcl Nomad | =1.0.2 | |
| Hcltech Hcl Nomad | =1.0.2 | |
| Hcltech Hcl Nomad | =1.0.3 | |
| Hcltech Hcl Nomad | =1.0.3 | |
| Hcltech Hcl Nomad | =1.0.4 | |
| Hcltech Hcl Nomad | =1.0.4 | |
| Hcltech Hcl Nomad | =1.0.5 | |
| Hcltech Hcl Nomad | =1.0.5 | |
| Hcltech Hcl Nomad | =1.0.6 | |
| Hcltech Hcl Nomad | =1.0.7 | |
| Hcltech Hcl Nomad | =1.0.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-4092.
What is the severity of CVE-2020-4092?
The severity of CVE-2020-4092 is medium with a CVSS score of 5.3.
Which software is affected by CVE-2020-4092?
HCL Nomad on Android and iOS Platforms version 1.0 through 1.0.8 is affected by CVE-2020-4092.
What is the impact of CVE-2020-4092?
If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text, potentially exposing sensitive information.
Is there a user interface option to change the setting to request an encrypted communication channel with the Domino server?
Currently, HCL Nomad on Android and iOS Platforms does not have a user interface option to change the setting to request an encrypted communication channel with the Domino server.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/hcltech
- canonical/hcltech hcl nomad
- version/hcltech hcl nomad/1.0
- version/hcltech hcl nomad/1.0.1
- version/hcltech hcl nomad/1.0.2
- version/hcltech hcl nomad/1.0.3
- version/hcltech hcl nomad/1.0.4
- version/hcltech hcl nomad/1.0.5
- version/hcltech hcl nomad/1.0.6
- version/hcltech hcl nomad/1.0.7
- version/hcltech hcl nomad/1.0.8