CVE-2022-42446

HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access

Medium · published November 30, 2022

CVSS v3.1
6.5
EPSS
0%
Percentile
33.6
In the wild
Unconfirmed
What it is

Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00405 · 33.6th percentile
Published
2022-11-30T22:54Z
EPSS history
Timeline
  • 30 NOV 22:54Z
    HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access
    cvelistv5