Lucene search
PRIOn knowledge basePRION:CVE-2022-38654HistoryNov 04, 2022 - 9:15 p.m.
Information disclosure
2022-11-0421:15:00
PRIOn knowledge base
www.prio-n.com
7
hcl domino
information disclosure
vulnerability
xacl read restrictions
authenticated attacker
user's person record
HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access attributes from a user’s person record.
