Unrated severityNVD Advisory· Published Oct 23, 2024· Updated Oct 29, 2024

HCL Sametime is impacted by insecure services

CVE-2024-30124

Description

HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was enabled by default using the HTTP protocol. An attacker could potentially use this service endpoint maliciously.

Affected products

HCLTech/Sametimellm-fuzzy
HCL Software/Sametimev5
Range: <=12.0.2

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000