CVE-2022-27558

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@hcl.com

Published

2022-08-29

Last modified

2024-09-17

Weaknesses

CWE-521

Affected products

• Hcl Inotes (Hcl Software)
• Domino (Hcltech)
• Hcl Inotes (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100217