← Back

CVE-2023-37540

nvd nist
Published: Feb 23, 2024Modified: Jun 17, 2026

JSON object

Loading...
3.9
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Exploitability: 1.3 / Impact: 2.5
Source: psirt@hcl.com (Secondary)

Description

Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data.

Affected (1)

Products: Hcltech: Sametime
Hcltech
1 product
Sametime
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Sametime
From 11.5 to 12.0.2

Related CWEs

CWE-922
Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (2)

Source: psirt@hcl.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.