title: HCL Domino is affected by an Insufficient Access Control vulnerability
description: HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure.
problem types: CWE-284 Improper Access Control
affected:
{
product: HCL Domino
vendor: HCL Software
versions:
status: affected, version: 9, 10 and 11
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.1
]
workarounds: Supported releases prior to 11.0.1 Fixpack 3 can use the following notes.ini setting to enable protection from this vulnerability:
SharedMemoryAllowOnly=1
Note that enabling this protection can impact some activities, see additional information in article, KB0090343.
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0090343