Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-38654

HCL Domino is susceptible to an information disclosure vulnerability

Description

HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access attributes from a user's person record.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL Domino

Default version status: unaffected

  • 9, 10, 11, 12affected

References