← Back

CVE-2022-42446

nvd nist
Published: Dec 12, 2022Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitability: 3.9 / Impact: 2.5
Source: NVD

Description

Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.

Affected (2)

Products: Hcltech: Sametime
Hcltech
1 product
Sametime
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Hcltech
Sametime
Version 12.0
Sametime
Version 12.0 fp1

Related CWEs

CWE-276
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

Source: psirt@hcl.com
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.