CVE-2024-30132: Missing default HTTP security headers affect HCL Nomad server on Domino
Published Oct 1, 2024
·Updated
HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors.
Affected Software
2 affected components
HCL Nomad
hcltech Nomad Server On Domino<1.0.13
Event History
Oct 1, 2024
CVE Published
via MITRE·12:10 PM
Data Sourced
via MITRE·12:10 PM
DescriptionSeverity
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-30132?
The severity of CVE-2024-30132 is currently classified as medium due to the potential to expose sensitive information.
2
How do I fix CVE-2024-30132?
To fix CVE-2024-30132, ensure that the HTTP security headers are properly configured in your HCL Nomad server settings.
3
Which software versions are affected by CVE-2024-30132?
CVE-2024-30132 affects all versions of HCL Nomad that do not have the HTTP security headers configured.
4
What type of attack does CVE-2024-30132 facilitate?
CVE-2024-30132 facilitates information disclosure attacks due to the missing HTTP security headers.
5
Is there a patch available for CVE-2024-30132?
Yes, a patch or guidance for configuring the necessary security settings is available from HCL support.