CVE-2020-4126

{"containers": {"cna": {"affected": [{"product": "HCL iNotes", "vendor": "n/a", "versions": [{"status": "affected", "version": "v10.0.1 FP6, v11.0.1 FP2 and later"}]}], "descriptions": [{"lang": "en", "value": "HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes versions 10.0.1 FP6 and 11.0.1 FP2 and later."}], "problemTypes": [{"descriptions": [{"description": "Sensitive cookie exposure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-11-30T23:50:09.000Z", "orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@hcl.com", "ID": "CVE-2020-4126", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HCL iNotes", "version": {"version_data": [{"version_value": "v10.0.1 FP6, v11.0.1 FP2 and later"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes versions 10.0.1 FP6 and 11.0.1 FP2 and later."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Sensitive cookie exposure"}]}]}, "references": {"reference_data": [{"name": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411", "refsource": "MISC", "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T07:52:20.918Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411"}]}]}, "cveMetadata": {"assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "assignerShortName": "HCL", "cveId": "CVE-2020-4126", "datePublished": "2020-11-30T23:50:09.000Z", "dateReserved": "2019-12-30T00:00:00.000Z", "dateUpdated": "2024-08-04T07:52:20.918Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "HCL iNotes", "vendor": "n/a", "versions": [{"status": "affected", "version": "v10.0.1 FP6, v11.0.1 FP2 and later"}]}], "source": "psirt@hcl.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:hcl_inotes:*:*:*:*:*:*:*:*", "matchCriteriaId": "281A8ED6-2F9B-493E-9E5B-E2CF8CAADE86", "versionEndExcluding": "10.0.1", "versionStartIncluding": "9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_inotes:*:*:*:*:*:*:*:*", "matchCriteriaId": "83B10D1E-A272-48A7-AB91-12CE7B909B6B", "versionEndExcluding": "11.0.1", "versionStartIncluding": "11.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_inotes:10.0.1:-:*:*:*:*:*:*", "matchCriteriaId": "6DB5111E-B70F-475F-A23D-DF08FD1AB97E", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack1:*:*:*:*:*:*", "matchCriteriaId": "7AA0BE4B-C5B2-4F0A-AE23-25032CC7C2E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack2:*:*:*:*:*:*", "matchCriteriaId": "AE8447C7-B040-461A-88AD-C407A3867928", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack3:*:*:*:*:*:*", "matchCriteriaId": "080E290A-A18E-45A6-9039-369763AC27CC", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack4:*:*:*:*:*:*", "matchCriteriaId": "EE08595A-7384-4DED-854F-B28C4C431FEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack5:*:*:*:*:*:*", "matchCriteriaId": "3971CAAD-A1A2-4EE9-9BC9-A7108E3B671C", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_inotes:11.0.1:-:*:*:*:*:*:*", "matchCriteriaId": "2433DEDD-8650-4B01-85B9-92F5D1446030", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack1:*:*:*:*:*:*", "matchCriteriaId": "582BCD88-43F2-4E10-B638-4C1D54ED71F8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes versions 10.0.1 FP6 and 11.0.1 FP2 and later."}, {"lang": "es", "value": "HCL iNotes es susceptible a una vulnerabilidad de exposici\u00f3n de cookies confidenciales. Esto puede permitir a un atacante remoto no autenticado capturar la cookie interceptando su transmisi\u00f3n dentro de una sesi\u00f3n http. Las correcciones est\u00e1n disponibles en HCL Domino e iNotes versiones 10.0.1 FP6 y 11.0.1 FP2 y posteriores"}], "id": "CVE-2020-4126", "lastModified": "2026-06-17T03:19:33.797", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-12-01T00:15:11.197", "references": [{"source": "psirt@hcl.com", "tags": ["Vendor Advisory"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085411"}], "sourceIdentifier": "psirt@hcl.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-311"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}