CVE-2020-4126

HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes versions 10.0.1 FP6 and 11.0.1 FP2 and later.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hcltech:hcl_inotes:*:*:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:*:*:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:10.0.1:-:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack1:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack2:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack3:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack4:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack5:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:11.0.1:-:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack1:*:*:*:*:*:*

History

21 Nov 2024, 05:32

Type Values Removed Values Added
References () https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411 - Vendor Advisory () https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411 - Vendor Advisory

Information

Published : 2020-12-01 00:15

Updated : 2024-11-21 05:32


NVD link : CVE-2020-4126

Mitre link : CVE-2020-4126

CVE.ORG link : CVE-2020-4126


JSON object : View

Products Affected

hcltech

  • hcl_inotes
CWE
CWE-311

Missing Encryption of Sensitive Data