CVE-2020-4092 - "If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server

Back Back to CVE browser

MEDIUM

"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server

Published May 6, 2020

5.3

MEDIUM

CVSS 3.1

EPSS 0.33%

Description

"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expose sensitive information including but not limited to server names, user IDs and document content."

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25339
Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078969
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25339		Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078969		x_refsource_MISCVendor Advisory