Hcl Software Hcl Domino Server vulnerabilities

CVE-2023-37495 [MEDIUM] CWE-306 CVE-2023-37495: Internet passwords stored in Person documents in the Domino® Directory created using the "Add Person Internet passwords stored in Person documents in the Domino® Directory created using the "Add Person" action on the People & Groups tab in the Domino® Administrator are secured using a cryptographically weak hash algorithm. This could enable attackers with access to the hashed value to determine a user's password, e.g. using a brute force attack. Th

CVE-2023-28010 [MEDIUM] CWE-200 CVE-2023-28010: In some configuration scenarios, the Domino server host name can be exposed. This information could In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target future attacks.