CVE-2026-108014: HCLSoftware Domino Server, слаба криптография

Описание

Оригинално описание

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server.  An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.

Засегнати продукти

• HCLSoftware Domino Server: <1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1

Вид слабост

• CWE-327 Използване на компрометиран или рисков криптографски алгоритъм

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-108014
• https://nvd.nist.gov/vuln/detail/CVE-2026-108014
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134742