What is CVE-2022-38654?

CVE-2022-38654 is a medium-severity vulnerability in Hcl Software Domino, classified under Information Disclosure. CVSS score: 5.5/10. Published 2022-11-04.

How severe is CVE-2022-38654?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Information disclosure in Hcl Software Domino

CVE-2022-38654

HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vuln…

Vulnerability class: Information Disclosure

EPSS: 0.002 (8.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Hcl Software Domino — versions 9, 10, 11, 12
Hcltech Domino — versions 9.0.1, 10.0.0, 10.0.1

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@hcl.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-38654?: CVE-2022-38654 is a medium-severity vulnerability in Hcl Software Domino, classified under Information Disclosure. CVSS score: 5.5/10. Published 2022-11-04.
How severe is CVE-2022-38654?: Medium severity. CVSS v3 base score is 5.5 out of 10.