CVE-2024-30132

HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors.

Score

CVSS 3.1 7.5 High

Status

Analyzed - psirt@hcl.com

Published

2024-10-01

Last modified

2024-10-29

Weaknesses

CWE-922

Affected products

• Nomad Server On Domino (Hcl Software)
• Nomad Server On Domino (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0116298