CVE-2022-27558 describes a Broken Password Strength Checks vulnerability in HCL iNotes and HCL Domino, where custom password policies are not enforced on specific iNotes forms, allowing users to set weak passwords. This vulnerability has a CVSS score of 7.5 (HIGH), indicating it can be exploited remotely with low attack complexity, potentially leading to unauthorized access (C:H). While the EPSS score is low, suggesting limited current threat, there is no known public exploit code, Metasploit modules, or active exploitation. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.0.1CPE matchmatch criteria | cpe:2.3:a:hcltech:domino:12.0.1:-:*:*:*:*:*:* | ||
12.0.1CPE matchmatch criteria | cpe:2.3:a:hcltech:domino:12.0.1:fixpack_1:*:*:*:*:*:* | ||
12.0.1CPE matchmatch criteria | cpe:2.3:a:hcltech:hcl_inotes:12.0.1:-:*:*:*:*:*:* | ||
12.0.1CPE matchmatch criteria | cpe:2.3:a:hcltech:hcl_inotes:12.0.1:fixpack_1:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.