CVE-2024-23586: falha de média gravidade em HCL Software Nomad server on Domino
An insufficient session timeout vulnerability affects HCL Nomad server on Domino
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
HCL Nomad is susceptible to an insufficient session expiration vulnerability. Under certain circumstances, an unauthenticated attacker could obtain old session information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
HCL Software · Nomad server on DominoCVEs relacionadas — HCL Software Nomad server on Domino
No mesmo produto, das mais perigosas para as menos.
CVE-2024-30128HIGHAn open proxy vulnerability affects HCL Nomad server on DominoEPSS 0.4%CVE-2024-23588MEDIUMA denial of service vulnerability affects HCL Nomad server on DominoEPSS 0.3%CVE-2024-30132LOWMissing default HTTP security headers affect HCL Nomad server on DominoEPSS 0.3%CVE-2024-30129MEDIUMHCL Nomad server on Domino is affected by a host header injection vulnerabilityEPSS 0.3%CVE-2024-30130LOWHCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerabilityEPSS 0.3%