CVE-2024-30132

Published: Oct 1, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected (1)

Products: Hcltech: Nomad Server On Domino

Hcltech

1 product

Nomad Server On Domino

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hcltech Nomad Server On Domino	Before 1.0.13

Related CWEs

CWE-922

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (1)

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0116298

Source: psirt@hcl.com

Vendor Advisory

Timeline

No history available yet.