VULNERABILITY INTELLIGENCE

CVE-2024-30124

CVSS score4 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2024-10-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was enabled by default using the HTTP protocol. An attacker could potentially use this service endpoint maliciously.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-1188

Primary references