Lucene search

[email protected]CVE-2020-14270

HistoryDec 22, 2020 - 9:15 p.m.

CVE-2020-14270

2020-12-2221:15:12

CWE-755

[email protected]

web.nvd.nist.gov

hcl

domino

xpages

vulnerability

error handling

information disclosure

cve-2020-14270

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated attacker could exploit this vulnerability to obtain information about the XPages software running on the Domino server.

Affected configurations

NVD

Node

hcltechdominoRange9.0.0–10.0.0

hcltechdominoMatch10.0.1-

hcltechdominoMatch10.0.1fix_pack_1

hcltechdominoMatch10.0.1fix_pack_2

hcltechdominoMatch10.0.1fix_pack_3

hcltechdominoMatch10.0.1fix_pack_4

hcltechdominoMatch11.0.0

hcltechdominoMatch11.0.1-

CPENameOperatorVersion
hcltech:dominohcltech dominole10.0.0
hcltech:dominohcltech dominoeq10.0.1
hcltech:dominohcltech dominoeq11.0.0
hcltech:dominohcltech dominoeq11.0.1

CPE	Name	Operator	Version
hcltech:domino	hcltech domino	le	10.0.0
hcltech:domino	hcltech domino	eq	10.0.1
hcltech:domino	hcltech domino	eq	11.0.0
hcltech:domino	hcltech domino	eq	11.0.1

CNA Affected

[
  {
    "product": "HCL Domino",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v9, v10, v11"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085881

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

Related for CVE-2020-14270

prion1 cvelist1 nvd1