CVE-2024-30122

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

HCL Sametime is impacted by misconfigured security related HTTP headers. It was identified that some HTTP headers were missing on web service responses. This will lead to less secure browser default treatment for the policies controlled by these headers.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-922

Affected software

No affected versions have been published.

Timeline

Published: Oct 23, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-301244.0HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was enabled by default usin CVE-2024-301256.2HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die CVE-2024-301264.7HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that em CVE-2024-301273.2Missing "no cache" headers in HCL Leap permits sensitive data to be cached.CVE-2024-301286.5HCL Nomad server on Domino is affected by an open proxy vulnerability in which an unauthenticated attacker can mask their original source IP CVE-2024-301295.3The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause t CVE-2024-30138.8A flaw has been found in Teledyne FLIR AX8 up to 1.46.16. The impacted element is an unknown function of the file /tools/test_login.php?acti CVE-2024-301307.5HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability CVE-2024-301327.5HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive info CVE-2024-301335.3HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability. The application does not sufficiently manage its CVE-2024-301347.5The HCL Traveler for Microsoft Outlook executable (HTMO.exe) is being flagged as potentially Malicious Software or an Unrecognized Applicati CVE-2024-301357.5HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken.