CVE-2024-30129: falha de média gravidade em HCL Software Nomad server on Domino
HCL Nomad server on Domino is affected by a host header injection vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
HCL Software · Nomad server on DominoCVEs relacionadas — HCL Software Nomad server on Domino
No mesmo produto, das mais perigosas para as menos.
CVE-2024-30128HIGHAn open proxy vulnerability affects HCL Nomad server on DominoEPSS 0.4%CVE-2024-23588MEDIUMA denial of service vulnerability affects HCL Nomad server on DominoEPSS 0.3%CVE-2024-23586MEDIUMAn insufficient session timeout vulnerability affects HCL Nomad server on DominoEPSS 0.3%CVE-2024-30132LOWMissing default HTTP security headers affect HCL Nomad server on DominoEPSS 0.3%CVE-2024-30130LOWHCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerabilityEPSS 0.3%