CVE-2020-4129: Medium severity hcl domino vulnerability

Q: What is the severity of CVE-2020-4129?

CVE-2020-4129 is considered a medium severity vulnerability due to its potential for brute force attacks.

Q: How do I fix CVE-2020-4129?

To fix CVE-2020-4129, upgrade to HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6, or 11.0.1 FP1 and later.

Q: What is the impact of CVE-2020-4129?

The impact of CVE-2020-4129 allows unauthenticated attackers to bypass lockout policies via the LDAP service.

Q: Which versions of HCL Domino are affected by CVE-2020-4129?

HCL Domino versions prior to 9.0.1 FP10 IF6, 10.0.1 FP6, and 11.0.1 FP1 are affected by CVE-2020-4129.

Q: Who can exploit the CVE-2020-4129 vulnerability?

CVE-2020-4129 can be exploited by unauthenticated attackers.

Published Nov 30, 2020

Updated

HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.

Affected Software

12 affected components

hcltech Hcl Domino<9.0.1

hcltech Hcl Domino>=10.0.0<10.0.1

hcltech Hcl Domino>=11.0.0<11.0.1

hcltech Hcl Domino=9.0.1-feature_pack_10_interim_fix_2

hcltech Hcl Domino=9.0.1-feature_pack_10_interim_fix_3

hcltech Hcl Domino=9.0.1-feature_pack_10_interim_fix_4

hcltech Hcl Domino=9.0.1-feature_pack_10_interim_fix_5

hcltech Hcl Domino=10.0.1-fixpack1

hcltech Hcl Domino=10.0.1-fixpack2

hcltech Hcl Domino=10.0.1-fixpack3

hcltech Hcl Domino=10.0.1-fixpack4

hcltech Hcl Domino=10.0.1-fixpack5

Event History

Nov 30, 2020

CVE Published

via MITRE·11:46 PM

Data Sourced

via MITRE·11:46 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-4129?

CVE-2020-4129 is considered a medium severity vulnerability due to its potential for brute force attacks.

How do I fix CVE-2020-4129?

To fix CVE-2020-4129, upgrade to HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6, or 11.0.1 FP1 and later.

What is the impact of CVE-2020-4129?

The impact of CVE-2020-4129 allows unauthenticated attackers to bypass lockout policies via the LDAP service.

Which versions of HCL Domino are affected by CVE-2020-4129?

HCL Domino versions prior to 9.0.1 FP10 IF6, 10.0.1 FP6, and 11.0.1 FP1 are affected by CVE-2020-4129.

Who can exploit the CVE-2020-4129 vulnerability?