VULNERABILITY INTELLIGENCE

CVE-2020-4092

CVSS score5.3 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2020-05-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expose sensitive information including but not limited to server names, user IDs and document content."

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information

Primary references