Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-27558

Опубликовано: 29 авг. 2022
Источник: nvd
CVSS3: 5.9
CVSS3: 7.5
EPSS Низкий

Описание

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hcltech:domino:12.0.1:-:*:*:*:*:*:*
cpe:2.3:a:hcltech:domino:12.0.1:fixpack_1:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:12.0.1:-:*:*:*:*:*:*
cpe:2.3:a:hcltech:hcl_inotes:12.0.1:fixpack_1:*:*:*:*:*:*

EPSS

Процентиль: 45%
0.00222
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-521
CWE-521

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.

EPSS

Процентиль: 45%
0.00222
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-521
CWE-521