5.8
Medium
CVE-2024-30122 HCL Sametime is impacted by misconfigured security related HTTP headers
Description
HCL Sametime is impacted by misconfigured security related HTTP headers. It was identified that some HTTP headers were missing on web service responses. This will lead to less secure browser default treatment for the policies controlled by these headers.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sametime 12.0 | earliest → 12.0.2 | No fix stated |
Other CVEs of Sametime
The 8 CVEs of Sametime →
CVE-2023-50355
HCL Sametime is impacted by the error messages containing sensitive information
3.6
Low
CVE-2024-30124
HCL Sametime is impacted by insecure services in-use on the UIM client by default
4.0
Medium
CVE-2021-27773
This vulnerability allows users to execute a clickjacking attack in the meeting's chat
4.2
Medium
CVE-2021-27772
Users are able to read group conversations without actively taking part in them
7.1
High