CVE-2023-37540
HCL Sametime Chat is affected by an unimplemented feature in the UI
Low · published February 23, 2024
What it is
Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data.
The record
Technical detail
- CVSS v3.1
- 3.9 · LOW
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00176 · 6.8th percentile
- Published
- 2024-02-23T07:00Z
EPSS history
Timeline