CVE-2023-45696

HCL Sametime is impacted by an autocomplete enabled vulnerability

Medium · published February 10, 2024

CVSS v3.1
4.0
EPSS
0%
Percentile
37.5
In the wild
Unconfirmed
What it is

Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allows user entered data to be stored by the browser.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.5th percentile
Published
2024-02-10T03:10Z
EPSS history
Timeline
  • 10 FEB 03:10Z
    HCL Sametime is impacted by an autocomplete enabled vulnerability
    cvelistv5