CVE-2024-30132
Missing default HTTP security headers affect HCL Nomad server on Domino
- State
- Published
- Severity
- 3.7 Low
- Published
- Oct 1, 2024
- Updated
- Oct 29, 2024
- Reserved
- Mar 22, 2024
Description
HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.7 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | HCL |
Weaknesses
- CWE-922 Insecure Storage of Sensitive Information
Affected Products
| Product | Versions |
|---|---|
Nomad server on DominoHCL Software |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.