CVE-2024-30122

HCL Sametime is impacted by misconfigured security related HTTP headers

Medium · published October 23, 2024

CVSS v3.1
5.8
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

HCL Sametime is impacted by misconfigured security related HTTP headers. It was identified that some HTTP headers were missing on web service responses. This will lead to less secure browser default treatment for the policies controlled by these headers.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Published
2024-10-23T14:59Z
EPSS history
Timeline
  • 23 OCT 14:59Z
    HCL Sametime is impacted by misconfigured security related HTTP headers
    cvelistv5