PT-2024-23197 · Hcl · Hcl Sametime

Published 2024-10-23 · Updated 2024-11-25 · CVE-2024-30122

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions HCL Sametime (affected versions not specified)

Description The issue is related to misconfigured security-related HTTP headers in HCL Sametime. Specifically, some HTTP headers are missing from web service responses, which can lead to less secure browser default treatment for the policies controlled by these headers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2024-30122

Affected Products

Hcl Sametime

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-30122 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0115627 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-30122 · Vendor Advisory
• https://t.me/cvedetector/8702 · Telegram Post