5.3
Medium
CVE-2024-23586 HCL Nomad is susceptible to an insufficient session expiration vulnerability
Description
HCL Nomad is susceptible to an insufficient session expiration vulnerability. Under certain circumstances, an unauthenticated attacker could obtain old session information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Nomad server on Domino 1.0 | earliest → < 1.0.13 | 1.0.13 |
| nomad_server_on_domino 1.0 | earliest → < 1.0.13 | 1.0.13 |
Other CVEs of Nomad server on Domino
The 6 CVEs of Nomad server on Domino →
CVE-2024-30129
The HTTP host header can be manipulated and cause the application to behave in unexpected ways
5.3
Medium
CVE-2024-30132
HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to…
3.7
Low
CVE-2024-30128
HCL Nomad server on Domino is affected by an open proxy vulnerability in which an unauthenticated attacker can mask…
8.6
High
CVE-2024-30130
HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an…
3.7
Low