6.8
Moyenne
CVE-2021-27770 The vulnerability was discovered within the “FaviconService”
Description
The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sametime | 11.6 | Pas de correctif indiqué |
Autres CVE de Sametime
Les 8 CVE de Sametime →
CVE-2023-50355
HCL Sametime is impacted by the error messages containing sensitive information
3.6
Faible
CVE-2024-30124
HCL Sametime is impacted by insecure services in-use on the UIM client by default
4.0
Moyenne
CVE-2024-30122
HCL Sametime is impacted by misconfigured security related HTTP headers
5.8
Moyenne
CVE-2021-27773
This vulnerability allows users to execute a clickjacking attack in the meeting's chat
4.2
Moyenne