Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
f another client. This has been fixed in 4.5.1.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/coturn/coturn/security/advisories/GHSA-c8r8-8vp5-6gcm - https://github.com/coturn/coturn/issues/583 - https://github.com/coturn/coturn/blob/aab60340b201d55c007bcdc853230f47aa2dfdf1/ChangeLog#L15 - https://www.debian.org/security/2020/dsa-4711 - https://lists.debian.org/debian-lts-announce/2020/07/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00010.html - https://usn.ubuntu.com/4415-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNJJO77ZLGGFJWNUGP6VDG5HPAC5UDBK/ - https://l
oject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNJJO77ZLGGFJWNUGP6VDG5HPAC5UDBK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5G35UBNSRLL6SYRTODYTMBJ65TLQILUM/
CVE ID: CVE-2020-4068 State: PUBLISHED Published: 2020-06-22T15:30:17 Last Updated: 2024-08-04T07:52:20.911Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: kylebrowning Products: APNSwift Problem Types: CWE-122 Description: In APNSwift 1.0.0, calling APNSwiftSigner.sign(digest:) is likely to result in a heap buffer overflow. This has been fixed in 1.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kylebrowning/APNSwift/security/advisories/GHSA-qh2w-vjxg-mjcg - https://github.com/kylebrowning/APNSwift/issues/31 - https://github.com/kylebrowning/APNSwift/pull/32 - https://github.com/kylebrowning/APNSwift/commit/97fa7f69
/issues/31 - https://github.com/kylebrowning/APNSwift/pull/32 - https://github.com/kylebrowning/APNSwift/commit/97fa7f69dcdd89168fff84e0ba8f999881ee3d3f
CVE ID: CVE-2020-4070 State: PUBLISHED Published: 2020-06-22T15:40:12 Last Updated: 2024-08-04T07:52:20.971Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: World Wide Web Consortium (W3C) Products: CSS Validator Problem Types: CWE-79 Description: In CSS Validator less than or equal to commit 54d68a1, there is a cross-site scripting vulnerability in handling URIs. A user would have to click on a specifically crafted validator link to trigger it. This has been patched in commit e5c09a9. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/w3c/css-validator/security/advisories/GHSA-wf36-7w73-rh8c - https://github.com/w3c/css-vali
rences: - https://github.com/w3c/css-validator/security/advisories/GHSA-wf36-7w73-rh8c - https://github.com/w3c/css-validator/commit/e5c09a9119167d3064db786d5f00d730b584a53b
CVE ID: CVE-2020-4071 State: PUBLISHED Published: 2020-06-24T12:15:13 Last Updated: 2024-08-04T07:52:20.915Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: tm-kn Products: django-basic-auth-ip-whitelist Problem Types: CWE-208 Description: In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e. BASIC_AUTH_LOGIN and BASIC_AUTH_PASSWORD is set. Currently the string comparison between configured credentials and the ones provided by users is performed through a character-by-character string comparison. This enables a possibility that attacker may time the time it takes t
hrough a character-by-character string comparison. This enables a possibility that attacker may time the time it takes the server to validate different usernames and password, and use this knowledge to work out the valid credentials. This attack is understood not to be realistic over the Internet. However, it may be achieved from within local networks where the website is hosted, e.g. from inside a data centre where a website's server is located. Sites protected by IP address whitelisting only are unaffected by this vulnerability. This vulnerability has been fixed on version 0.3.4 of django-basic-auth-ip-whitelist. Update to version 0.3.4 as soon as possible and change basic authentication u
n 0.3.4 of django-basic-auth-ip-whitelist. Update to version 0.3.4 as soon as possible and change basic authentication username and password configured on a Django project using this package. A workaround without upgrading to version 0.3.4 is to stop using basic authentication and use the IP whitelisting component only. It can be achieved by not setting BASIC_AUTH_LOGIN and BASIC_AUTH_PASSWORD in Django project settings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tm-kn/django-basic-auth-ip-whitelist/security/advisories/GHSA-m38j-pmg3-v5x5 - https://groups.google.com/forum/#%21msg/django-developers/iAaq0pvHXuA/fpUuwjK3i2wJ
CVE ID: CVE-2020-4072 State: PUBLISHED Published: 2020-06-25T20:05:15 Last Updated: 2024-08-04T07:52:20.910Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: jhipster Products: jhipster-kotlin Problem Types: CWE-117 Description: In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. As the email is provided by a user and the api is public this can be used by an attacker to forge log entries. This is vulnerable to https://cwe.mitre.org/data/definitions/117.html This problem affects only application generated with jwt or session authentication. Applications using oauth are not vulnerable. This issue has been fixe
tion generated with jwt or session authentication. Applications using oauth are not vulnerable. This issue has been fixed in version 1.7.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhipster/jhipster-kotlin/security/advisories/GHSA-pfxf-wh96-fvjc - https://owasp.org/www-community/attacks/Log_Injection - https://www.baeldung.com/jvm-log-forging - https://github.com/jhipster/jhipster-kotlin/commit/426ccab85e7e0da562643200637b99b6a2a99449
CVE ID: CVE-2020-4074 State: PUBLISHED Published: 2020-07-02T17:05:25 Last Updated: 2024-08-04T07:52:20.910Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L) Vendors: PrestaShop Products: PrestaShop Problem Types: CWE-287 Description: In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands. The problem is fixed in 1.7.6.6. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-ccvh-jh5x-mpg4 - https://github.com/PrestaShop/PrestaShop/commit/30b6a7bdaca9cb940d3ce462906dbb062499fc30
CVE ID: CVE-2020-4075 State: PUBLISHED Published: 2020-07-07T00:05:28 Last Updated: 2024-08-04T07:52:20.843Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: electron Products: electron Problem Types: CWE-552 Description: In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, arbitrary local file read is possible by defining unsafe window options on a child window opened via window.open. As a workaround, ensure you are calling `event.preventDefault()` on all new-window events where the `url` or `options` is not something you expect. This is fixed in versions 9.0.0-beta.21, 8.2.4 and 7.2.4. Additional Analyst Notes: - CVE Program Container: References: -
s is fixed in versions 9.0.0-beta.21, 8.2.4 and 7.2.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824 - https://github.com/electron/electron/security/advisories/GHSA-f9mq-jph6-9mhm
CVE ID: CVE-2020-4076 State: PUBLISHED Published: 2020-07-07T00:05:21 Last Updated: 2024-08-04T07:52:20.967Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: electron Products: electron Problem Types: CWE-501 Description: In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Apps using contextIsolation are affected. This is fixed in versions 9.0.0-beta.21, 8.2.4 and 7.2.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.electronjs.org/releases/stable?page=3#rel
. Additional Analyst Notes: - CVE Program Container: References: - https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824 - https://github.com/electron/electron/security/advisories/GHSA-m93v-9qjc-3g79
CVE ID: CVE-2020-4077 State: PUBLISHED Published: 2020-07-07T00:05:16 Last Updated: 2024-08-04T07:52:20.939Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: electron Products: electron Problem Types: CWE-501 Description: In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Apps using both `contextIsolation` and `contextBridge` are affected. This is fixed in versions 9.0.0-beta.21, 8.2.4 and 7.2.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/electro
.0-beta.21, 8.2.4 and 7.2.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/electron/electron/security/advisories/GHSA-h9jc-284h-533g - https://www.electronjs.org/releases/stable?page=3#release-notes-for-v824
CVE ID: CVE-2020-4079 State: PUBLISHED Published: 2021-01-12T19:20:14 Last Updated: 2024-08-04T07:52:20.880Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Combodo Products: iTop Problem Types: CWE-200 Description: Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 2.8.0, when the ajax endpoint for the "excel export" portal functionality is called directly it allows getting data without scope filtering. This allows a user to access data they which they should not have access to. This is fixed in versions 2.7.2 and 3.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Combodo/iTop/secu
s 2.7.2 and 3.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-vcv9-xp3j-7jwh
CVE ID: CVE-2020-4080 State: PUBLISHED Published: 2020-12-18T21:14:49 Last Updated: 2024-08-04T07:52:20.921Z Vendors: n/a Products: HCL Verse Problem Types: Cross-site scripting Description: HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article
ntials. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085887
CVE ID: CVE-2020-4081 State: PUBLISHED Published: 2021-02-02T20:08:48 Last Updated: 2024-08-04T07:52:20.917Z Vendors: n/a Products: HCL Digital Experience Problem Types: "Cross-site scripting" Description: In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085225
CVE ID: CVE-2020-4082 State: PUBLISHED Published: 2020-03-05T18:45:23 Last Updated: 2024-08-04T07:52:20.938Z Vendors: HCL Software Products: "HCL Connections" Problem Types: Cross-Site Scripting Description: The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: Refer
to steal the victim's cookie-based authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0075447
CVE ID: CVE-2020-4083 State: PUBLISHED Published: 2020-03-05T18:39:40 Last Updated: 2024-08-04T07:52:20.964Z Vendors: HCL Software Products: "HCL Connections" Problem Types: Path Disclosure Description: HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0075503
CVE ID: CVE-2020-4084 State: PUBLISHED Published: 2020-03-09T16:42:54 Last Updated: 2024-08-04T07:52:20.933Z Vendors: HCL Software Products: HCL Connections Problem Types: Cross-Site Scripting Description: HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0076649
CVE ID: CVE-2020-4085 State: PUBLISHED Published: 2020-04-22T14:53:48 Last Updated: 2024-08-04T07:52:20.965Z Vendors: n/a Products: "HCL Connections" Problem Types: "Information Disclosure" Description: "HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0077976
CVE ID: CVE-2020-4089 State: PUBLISHED Published: 2020-06-26T22:55:30 Last Updated: 2024-08-04T07:52:20.997Z Vendors: HCL Products: HCL Notes Problem Types: "Information Leakage" Description: HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080343
CVE ID: CVE-2020-4092 State: PUBLISHED Published: 2020-05-06T12:30:48 Last Updated: 2024-08-04T07:52:20.919Z Vendors: n/a Products: "HCL Nomad" Problem Types: "Sensitive Information Exposure" Description: "If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expose sensitive information including but not limited to server names, user IDs and document content." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?
d document content." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078969
CVE ID: CVE-2020-4095 State: PUBLISHED Published: 2020-07-16T18:27:41 Last Updated: 2024-08-04T07:52:20.964Z Vendors: n/a Products: "HCL BigFix Platform" Problem Types: "Clear text credentials" Description: "BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administrative privileges can use a program to create a memory dump and extract the credentials. These credentials can be used to pivot further into the environment. The principle of least privilege should be applied to all BigFix deployments, limiting administrative access." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_
ative access." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080772
CVE ID: CVE-2020-4097 State: PUBLISHED Published: 2020-11-05T16:45:02 Last Updated: 2024-08-04T07:52:20.916Z Vendors: n/a Products: HCL Notes Problem Types: Buffer overflow Description: In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a buffer overflow. This could enable an attacker to crash HCL Notes or execute attacker-controlled code on the client. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?i
code on the client. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084796
CVE ID: CVE-2020-4099 State: PUBLISHED Published: 2022-11-01T17:55:10.519Z Last Updated: 2025-05-02T16:02:40.193Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: HCL Software Products: HCL Verse for Android Problem Types: CWE-326 Description: The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100861
CVE ID: CVE-2020-4100 State: PUBLISHED Published: 2020-07-15T12:31:11 Last Updated: 2024-08-04T07:52:20.938Z Vendors: n/a Products: "HCL Verse for Android" Problem Types: "Dynamic code loading/injection" Description: "HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a developer to specify which components of the application should not be loaded by default when the application is started. Typically, core components and additional dependencies are loaded natively at runtime; however, dynamically loaded components are only loaded as they are specifically requested. While this can have a positive impact on performance, or grant additional functionality (for e
e specifically requested. While this can have a positive impact on performance, or grant additional functionality (for example, a non-invasive update feature), it can also open the application to loading unintended code if not implemented properly." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080800
CVE ID: CVE-2020-4101 State: PUBLISHED Published: 2020-06-11T13:20:13 Last Updated: 2024-08-04T07:52:20.913Z Vendors: n/a Products: "HCL Digital Experience" Problem Types: "Server-side request forgery" Description: "HCL Digital Experience is susceptible to Server Side Request Forgery." Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0079840
CVE ID: CVE-2020-4102 State: PUBLISHED Published: 2020-12-02T00:56:42 Last Updated: 2024-08-04T07:52:20.914Z Vendors: n/a Products: HCL Notes Problem Types: "Buffer overflow" Description: HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute attacker-controlled code on the client system. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085499
CVE ID: CVE-2020-4104 State: PUBLISHED Published: 2020-07-17T20:46:39 Last Updated: 2024-08-04T07:52:20.943Z Vendors: HCL Products: HCL BigFix WebUI Problem Types: "Cross-site scripting" Description: HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can use XSS to send a malicious script to an unsuspecting user. This affects all versions prior to latest releases as specified in https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080855&sys_kb_id=971d99ed1b8ed01c086dcbfc0a4bcb6a. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB008085
t Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080855
CVE ID: CVE-2020-4107 State: PUBLISHED Published: 2022-05-19T21:25:10.514010Z Last Updated: 2024-09-16T21:03:04.792Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: HCL Software Products: HCL Domino Problem Types: CWE-284 Description: HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0090221
CVE ID: CVE-2020-4125 State: PUBLISHED Published: 2020-07-20T21:52:17 Last Updated: 2024-08-04T07:52:20.934Z Vendors: n/a Products: "HCL Marketing Operations" Problem Types: "Sensitive data exposure" Description: Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some modification in the link, giving the attacker access to confidential information. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080941
CVE ID: CVE-2020-4126 State: PUBLISHED Published: 2020-11-30T23:50:09 Last Updated: 2024-08-04T07:52:20.918Z Vendors: n/a Products: HCL iNotes Problem Types: Sensitive cookie exposure Description: HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes versions 10.0.1 FP6 and 11.0.1 FP2 and later. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411
CVE ID: CVE-2020-4127 State: PUBLISHED Published: 2020-11-30T21:41:53 Last Updated: 2024-08-04T07:52:20.933Z Vendors: n/a Products: HCL Domino Problem Types: Login CSRF vulnerability Description: HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user's system to access internal systems from the internet. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085409
CVE ID: CVE-2020-4128 State: PUBLISHED Published: 2020-12-01T13:12:37 Last Updated: 2024-08-04T07:52:20.922Z Vendors: n/a Products: HCL Domino Problem Types: "Lockout policy bypass " Description: HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the ID Vault service. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085408