Overview
- Description
- HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected.
- Source
- psirt@hcl.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 6.5
- Impact score
- 3.6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hcltech:notes:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19015D39-9117-4A6E-BCD7-0951CB185399"
},
{
"criteria": "cpe:2.3:a:hcltech:notes:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3C46D23-F52D-46D7-973B-FEF916ECD181"
},
{
"criteria": "cpe:2.3:a:hcltech:notes:11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06AD0ACF-704C-4BBE-9059-1A1E9008D7A4"
}
],
"operator": "OR"
}
]
}
]