HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.
CVE-2022-27558

5.9MEDIUM

Key Information:

Vendor

Hcl Software
Status
Hcl Inotes
Vendor
CVE Published:
24 August 2022

What is CVE-2022-27558?

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.

Affected Version(s)

HCL iNotes 12.0.1, 12.0.1FP1

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_a...
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.