---
cve: "CVE-2020-4107"
severity: "HIGH"
cvss: 8.8
epss: "23%"
vendor: "HCL Software"
kev: false
exploited: false
published: "2022-05-19 22:15:07"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-17T08:46:33+02:00"
---

# CVE-2020-4107

> 8.8 HIGH

## Beschreibung

HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0090221>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2020-4107) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_