eMudhra Compromised Certficate vulnerability impacts HCL Notes Client
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The HCL Notes Client is affected because the private keys for eight eMudhra intermediate certificate authority certificates were compromised, which undermines the certificate trust its outbound network features rely on. An unauthenticated network attacker could use this to impersonate servers and perform man-in-the-middle attacks, intercepting or modifying the content of outbound encrypted connections.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM) attack, enabling them to intercept and/or modify the content of outbound TLS connections.
Affected versions
- HCLSoftware Notes Client
<1=2.0.2 FP8, <=14.0 FP5, 14.5, ,<=14.5.1 FP1