← Back

CVE-2024-30122

nvd nist
Published: Oct 23, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

HCL Sametime is impacted by misconfigured security related HTTP headers. It was identified that some HTTP headers were missing on web service responses. This will lead to less secure browser default treatment for the policies controlled by these headers.

Affected (2)

Products: Hcltech: Sametime
Hcltech
1 product
Sametime
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Hcltech
Sametime
Before 12.0.2
Sametime
Version 12.0.2

Related CWEs

CWE-922
Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.