CVE-2024-42192
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to credential leakage, which could allow an attacker to access other computers or applications.
Risk Assessment
The risk involves unauthorized access to organizational systems and data through stolen credentials.
Recommendation
It is recommended to apply vendor updates immediately and monitor logs for unusual login attempts.
Other vulnerabilities in HCL Traveler
See all- CVE-2026-56547Low
The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded. The values cannot be changed later, and the generation page reflects them back. The profile is not usable without additional info and only allows the attacker to attack their own device, but HCL Traveler could at least check that the values are found in the Domino directory entry for the authenticated user.
- CVE-2024-23581Medium
HCL Traveler for Microsoft Outlook libraries are being falsely flagged as potentially malicious software or an unrecognized application. This may prevent installation or execution of the software by security systems.
Original NVD description (English source)
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage which could allow an attacker to access other computers or applications.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS