CVE-2023-45696: HCL Sametime is impacted by an autocomplete enabled vulnerability
Published Feb 10, 2024
·Updated
Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allows user entered data to be stored by the browser.
Affected Software
1 affected component
hcltech Sametime>=11.5<12.0.2
Event History
Feb 10, 2024
CVE Published
via MITRE·03:10 AM
Data Sourced
via MITRE·03:10 AM
DescriptionSeverity
Data Sourced
via NVD·03:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-45696?
CVE-2023-45696 is considered a medium severity vulnerability due to the potential exposure of sensitive user data.
2
How do I mitigate CVE-2023-45696?
To mitigate CVE-2023-45696, disable autocomplete in sensitive fields within the Legacy web chat client settings.
3
Which versions of HCL Sametime are affected by CVE-2023-45696?
CVE-2023-45696 affects HCL Sametime versions between 11.5 and 12.0.2.
4
What types of sensitive data are at risk in CVE-2023-45696?
CVE-2023-45696 can expose any user-inputted data in sensitive fields when autocomplete is enabled.
5
Is there a patch available for CVE-2023-45696?
As of now, check the official HCL resources for an update or patch addressing CVE-2023-45696.