← Back

CVE-2024-30124

nvd nist
Published: Oct 23, 2024Modified: Jun 17, 2026

JSON object

Loading...
4.0
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 2.5 / Impact: 1.4
Source: NVD

Description

HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was enabled by default using the HTTP protocol. An attacker could potentially use this service endpoint maliciously.

Affected (2)

Products: Hcltech: Sametime
Hcltech
1 product
Sametime
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Hcltech
Sametime
Before 12.0.2
Sametime
Version 12.0.2

Related CWEs

CWE-1188
Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.