CVE-2024-30129
HCL Nomad server on Domino is affected by a host header injection vulnerability
- State
- Published
- Severity
- 5.3 Medium
- Published
- Dec 6, 2024
- Updated
- Dec 6, 2024
- Reserved
- Mar 22, 2024
Description
The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | HCL |
Weaknesses
- CWE-644 Improper Neutralization of HTTP Headers for Scripting Syntax
Affected Products
| Product | Versions |
|---|---|
Nomad server on DominoHCL Software |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.