6.8
Medium
CVE-2021-27770 The vulnerability was discovered within the “FaviconService”
Description
The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sametime | 11.6 | No fix stated |
Other CVEs of Sametime
The 8 CVEs of Sametime →
CVE-2023-50355
HCL Sametime is impacted by the error messages containing sensitive information
3.6
Low
CVE-2024-30124
HCL Sametime is impacted by insecure services in-use on the UIM client by default
4.0
Medium
CVE-2024-30122
HCL Sametime is impacted by misconfigured security related HTTP headers
5.8
Medium
CVE-2021-27773
This vulnerability allows users to execute a clickjacking attack in the meeting's chat
4.2
Medium