VulnerabilityModified

CVE-2020-4126

HCL iNotes is susceptible to a sensitive cookie exposure vulnerability.

MEDIUM 5.9EPSS 0.67%

Does this matter?

Lower severity and a low EPSS score (0.67%). Track it; it rarely justifies an emergency change on its own.

Description

HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes versions 10.0.1 FP6 and 11.0.1 FP2 and later.

CVSS 3.1: 5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.67% probability · 50th percentile
CISA KEV: Not listed
Weakness: CWE-311
Affected: hcltech/hcl inotes
Source: psirt@hcl.com

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.