Lockout Policy Bypass Vulnerability in HCL Domino ID Vault Service

CVE-2020-4128

What is CVE-2020-4128?

HCL Domino is exposed to a lockout policy bypass vulnerability that affects its ID Vault service. This flaw allows unauthenticated attackers to circumvent the security controls intended to protect user accounts, potentially enabling them to execute brute force attacks. When exploited, this vulnerability can compromise the integrity of the ID Vault, leading to unauthorized access and data breaches. Organizations using this service should be vigilant and implement appropriate security measures to mitigate the risk.

References