CVE-2024-30129
HCL Nomad server on Domino is affected by a host header injection vulnerability
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Dec 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
HCL Software · Nomad server on DominoWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →