eMudhra Compromised Certficate vulnerability impacts HCL Domino Server
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
HCL Domino Server is affected because its certificate trust for outbound network requests relies on eight eMudhra intermediate CA certificates whose private keys have been compromised. An unauthenticated network attacker could use this to impersonate servers and intercept or modify outbound TLS connections.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
Affected versions
- HCLSoftware Domino Server
<1=2.0.2 FP8, <=14.0 FP5, 14.5, ,<=14.5.1 FP1