4.0
Medium
CVE-2024-30124 HCL Sametime is impacted by insecure services in-use on the UIM client by default
Description
HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was enabled by default using the HTTP protocol. An attacker could potentially use this service endpoint maliciously.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sametime 12.0 | earliest → 12.0.2 | No fix stated |
Other CVEs of Sametime
The 8 CVEs of Sametime →
CVE-2023-50355
HCL Sametime is impacted by the error messages containing sensitive information
3.6
Low
CVE-2024-30122
HCL Sametime is impacted by misconfigured security related HTTP headers
5.8
Medium
CVE-2021-27773
This vulnerability allows users to execute a clickjacking attack in the meeting's chat
4.2
Medium
CVE-2021-27772
Users are able to read group conversations without actively taking part in them
7.1
High