PT-2024-23201 · Hcl · Hcl Nomad Server

Published 2024-09-25 · Updated 2025-10-30 · CVE-2024-30128

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HCL Nomad server on Domino versions up to 1.0.12

Description The HCL Nomad server on Domino is affected by an open proxy vulnerability, allowing an unauthenticated attacker to mask their original source IP address. This may enable an attacker to trick the user into exposing sensitive information. An attacker can hide their real IP address, potentially leading to unauthorized access.

Recommendations For versions up to 1.0.12, patch immediately to the latest version to resolve the issue. As a temporary workaround, consider restricting access to the Source IP Address Handler to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-441

Related Identifiers

CVE-2024-30128

Affected Products

Hcl Nomad Server

References · 11

• https://osv.dev/vulnerability/CVE-2024-30128 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30128 · Security Note
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0115504 · Vendor Advisory
• https://twitter.com/CveFindCom/status/1838957295838916628 · Twitter Post
• https://t.me/cvedetector/6326 · Telegram Post
• https://t.me/latest_high_impact_cve/1216 · Telegram Post
• https://twitter.com/CVEnew/status/1838954479363723321 · Twitter Post
• https://t.me/cveNotify/141022 · Telegram Post
• https://t.me/cvenotify/95987 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1838984904777810006 · Twitter Post
• https://twitter.com/oktsec/status/1838996446424506430 · Twitter Post