Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-42446

HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access

Description

Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL Sametime

Default version status: unaffected

  • 12.0, 12.0FP1affected

References