PT-2024-23198 · Hcl · Hcl Sametime

Published 2024-10-23 · Updated 2026-01-08 · CVE-2024-30124

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions HCL Sametime (affected versions not specified)

Description The issue concerns insecure services in-use on the UIM client by default. Specifically, an unused legacy REST service was enabled by default using the HTTP protocol. This could potentially be exploited by an attacker using the service endpoint maliciously.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2024-30124

Affected Products

Hcl Sametime

References · 5

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0115627 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30124 · Security Note
• https://osv.dev/vulnerability/CVE-2024-30124 · Vendor Advisory
• https://t.me/cvedetector/8720 · Telegram Post
• https://t.me/cveNotify/148116 · Telegram Post