CVE-2024-30149

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

HCL AppScan Source <= 10.6.0 does not properly validate a TLS/SSL certificate for an executable.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-295

Affected software

VendorProductVersions
HCL SoftwareAppScan Source<= 10.6.0

References

Timeline

Published
Oct 31, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-30158.8A vulnerability classified as critical was found in SourceCodester Simple Subscription Website 1.0. Affected by this vulnerability is an unkCVE-2024-301509.1HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disCVE-2024-301518.3HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow uCVE-2024-301529.8HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive infoCVE-2024-301545.7HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious and unauthorized actionsCVE-2024-301554.3HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to tCVE-2024-301567.5Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustiCVE-2024-301577.2A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with CVE-2024-301587.2A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administratCVE-2024-301594.8A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administratCVE-2024-30169.1NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settCVE-2024-301604.8A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with
CVE-2024-30149: Medium severity, CVSS 6.5 | Vulnix