What’s Vulnerable › Vulnerabilities

CVE-2020-4092

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-06 · updated 2026-06-17
• Weakness: CWE-319

Description

"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expose sensitive information including but not limited to server names, user IDs and document content."

Affected products

• HCL Software HCL Nomad for web: 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5 (+3)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078969
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078969

Get alerted when CVE-2020-4092 or the next vulnerability affects your stack