CVE-2024-30128 An open proxy vulnerability affects HCL Nomad server on Domino
Unauthenticated attackers can use the server as an open proxy to mask their IP and trick users into exposing sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-30128?
CVE-2024-30128 is a high-severity server-side request forgery vulnerability in HCL Software Nomad server on Domino, published on 25 Sep 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
HCL Nomad server on Domino is affected by an open proxy vulnerability in which an unauthenticated attacker can mask their original source IP address. This may enable an attacker to trick the user into exposing sensitive information.
Weakness: CWE-441
Which versions are affected by CVE-2024-30128?
It affects 1 product.
Products include Hcltech Nomad Server on Domino.
How do I fix CVE-2024-30128?
No fix has been published for CVE-2024-30128 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2024-30128 being exploited?
There is no known exploitation of CVE-2024-30128 in the wild and no public exploit code.
Other vulnerabilities in HCL Software Nomad server on Domino
- CVE-2024-23588 A denial of service vulnerability affects HCL Nomad server on Domino
- CVE-2024-30132 Missing default HTTP security headers affect HCL Nomad server on Domino
- CVE-2024-30130 HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability
Sources
Also known as GHSA-6cm4-chj3-vwmx.