CVE-2022-42446: HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access
First published: Wed Nov 30 2022(Updated: )
Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.
Credit: psirt@hcl.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hcltech Sametime | =12.0 | |
| Hcltech Sametime | =12.0-fp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/title
- agent/author
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- vendor/hcltech
- canonical/hcltech sametime
- version/hcltech sametime/12.0
- version/hcltech sametime/12.0-fp1