6.5
Moyenne
CVE-2022-42446 Starting with Sametime 12, anonymous users are enabled by default
Description
Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL Sametime | Versions non publiées |
Autres CVE de HCL Sametime
Les 7 CVE de HCL Sametime →
CVE-2025-32000
HCL Sametime is vulnerable to insufficient input sanitization
4.3
Moyenne
CVE-2023-45698
Sametime is impacted by lack of clickjacking protection in Outlook add-in
4.8
Moyenne
CVE-2023-45696
Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client
4.0
Moyenne
CVE-2023-45718
Sametime is impacted by a failure to invalidate sessions
3.9
Faible