HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the ID Vault service.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Domino | Hcltech | 9.0.0 (including) | 9.0.1 (including) |
| Domino | Hcltech | 10.0.0 (including) | 10.0.1 (including) |
| Domino | Hcltech | 11.0.0 (including) | 11.0.1 (including) |
| Domino | Hcltech | 10.0.1 (including) | 10.0.1 (including) |
| Domino | Hcltech | 10.0.1-fix_pack_1 (including) | 10.0.1-fix_pack_1 (including) |
| Domino | Hcltech | 10.0.1-fix_pack_2 (including) | 10.0.1-fix_pack_2 (including) |
| Domino | Hcltech | 10.0.1-fix_pack_3 (including) | 10.0.1-fix_pack_3 (including) |
| Domino | Hcltech | 10.0.1-fix_pack_4 (including) | 10.0.1-fix_pack_4 (including) |
References
- https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0085408
- https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0085408