CVE-2024-30124 — HCL Sametime is impacted by insecure services

CVE-2024-30124

HCL Sametime is impacted by insecure services PUBLISHED

Description (CNA)

HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was enabled by default using the HTTP protocol. An attacker could potentially use this service endpoint maliciously.

Affected (CNA)

Vendor / product	Versions
HCL Software / Sametime	affected <=12.0.2

CWE

No CWE identifiers supplied.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0115627

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.