HCL Traveler vulnerabilities

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded. The values cannot be changed later, and the generation page reflects them back. The profile is not usable without additional info and only allows the attacker to attack their own device, but HCL Traveler could at least check that the values are found in the Domino directory entry for the authenticated user.

HCL Traveler for Microsoft Outlook libraries are being falsely flagged as potentially malicious software or an unrecognized application. This may prevent installation or execution of the software by security systems.

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to credential leakage, which could allow an attacker to access other computers or applications.