CVE:CVE-2022-38654
CNNVD:CNNVD-202211-2117
HCL Technologies HCL Domino是美国HCL Technologies公司的一个应用软件。提供一个应用开发平台。
HCL Technologies HCL Domino存在安全漏洞，该漏洞源于存在信息泄露，经过身份验证的攻击者可以利用此漏洞访问用户个人记录中的属性。
solution:Upgrade hcltech domino to a higher version than 9.0.1,9.0.1:feature_pack_10_interim_fix_3,9.0.1:feature_pack_10_interim_fix_4,9.0.1:feature_pack_10_interim_fix_5,9.0.1:feature_pack_8,9.0.1:feature_pack_8_interim_fix_1,9.0.1:feature_pack_8_interim_fix_2,9.0.1:feature_pack_8_interim_fix_3,9.0.1:fixpack_3,9.0.1:fixpack_4,9.0.1:fixpack_5,9.0.1:fixpack_6,9.0.1:fixpack_7,9.0.1:fixpack_8,9.0.1:fixpack_9,10.0.0,10.0.1,10.0.1:fixpack_1,10.0.1:fixpack_2,10.0.1:fixpack_3,10.0.1:fixpack_4,10.0.1:fixpack_5,10.0.1:fixpack_6,10.0.1:fixpack_7,11.0.1,11.0.1:fixpack_1,11.0.1:fixpack_2,11.0.1:fixpack_3,11.0.1:fixpack_4,11.0.1:fixpack_5,12.0,and avoid the version 9.0.1,9.0.1:feature_pack_10_interim_fix_3,9.0.1:feature_pack_10_interim_fix_4,9.0.1:feature_pack_10_interim_fix_5,9.0.1:feature_pack_8,9.0.1:feature_pack_8_interim_fix_1,9.0.1:feature_pack_8_interim_fix_2,9.0.1:feature_pack_8_interim_fix_3,9.0.1:fixpack_3,9.0.1:fixpack_4,9.0.1:fixpack_5,9.0.1:fixpack_6,9.0.1:fixpack_7,9.0.1:fixpack_8,9.0.1:fixpack_9,10.0.0,10.0.1,10.0.1:fixpack_1,10.0.1:fixpack_2,10.0.1:fixpack_3,10.0.1:fixpack_4,10.0.1:fixpack_5,10.0.1:fixpack_6,10.0.1:fixpack_7,11.0.1,11.0.1:fixpack_1,11.0.1:fixpack_2,11.0.1:fixpack_3,11.0.1:fixpack_4,11.0.1:fixpack_5,12.0