CVE-2024-23586 | THREATINT

Description

HCL Nomad is susceptible to an insufficient session expiration vulnerability. Under certain circumstances, an unauthenticated attacker could obtain old session information.

Reserved 2024-01-18 | Published 2024-09-27 | Updated 2024-10-04 | Assigner HCL

MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

GENERAL.

Problem types

CWE-613 Insufficient Session Expiration

Product status

Default status

unaffected

<1.0.13

affected

References

support.hcltechsw.com/...b_article&sysparm_article=KB0115264

cve.org (CVE-2024-23586)

nvd.nist.gov (CVE-2024-23586)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.