3.9
Low
CVE-2023-45718 Sametime is impacted by a failure to invalidate sessions
Description
Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Sametime | Versions not published |
Other CVEs of HCL Sametime
The 7 CVEs of HCL Sametime →
CVE-2025-32000
HCL Sametime is vulnerable to insufficient input sanitization
4.3
Medium
CVE-2023-45698
Sametime is impacted by lack of clickjacking protection in Outlook add-in
4.8
Medium
CVE-2023-45696
Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client
4.0
Medium
CVE-2023-45716
Sametime is impacted by sensitive information passed in URL
1.7
Low