{"id":"CVE-2020-4107","aliases":["EUVD-2020-25354","GHSA-j56v-7w7j-fg6q"],"status":"published","title":"HCL Domino is affected by an Insufficient Access Control vulnerability","description":"HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0024,"percentile":0.15122,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2022-05-19T21:25:10Z","modified":"2026-06-17T03:19:33Z","products":[{"vendor":"hcl","product":"hcl domino"},{"vendor":"hcl software","product":"hcl domino"},{"vendor":"hcltech","product":"domino"}],"references":[{"url":"https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0090221","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4107"},{"url":"https://github.com/advisories/GHSA-j56v-7w7j-fg6q"}],"sources":{"cve":[{"id":"CVE-2020-4107","title":"HCL Domino is affected by an Insufficient Access Control vulnerability","description":"HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure.","status":"published","published":"2022-05-19T21:25:10.514Z","modified":"2024-09-16T21:03:04.792Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:35:55.797746Z"}],"euvd":[{"id":"EUVD-2020-25354","description":"HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure.","status":"published","published":"2022-05-19T21:25:10Z","modified":"2024-09-16T21:03:04Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:08.578591Z"}],"ghsa":[{"id":"GHSA-j56v-7w7j-fg6q","title":"HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker...","description":"HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure.","status":"published","published":"2022-05-20T00:00:13Z","modified":"2023-01-28T05:05:07Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:44:18.061425Z"}],"nvd":[{"id":"CVE-2020-4107","description":"HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure.","status":"published","published":"2022-05-19T22:15:07.943Z","modified":"2026-06-17T03:19:33.587Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:06:46.951463Z"}]}}