CVE-2023-37540

HCL Sametime Chat is affected by an unimplemented feature in the UI

State: Published
Severity: 3.9 Low
Published: Feb 23, 2024
Updated: Nov 29, 2024
Reserved: Jul 6, 2023

Description

Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data.

Scores

CVSS	Score	Vector	Source
3.1	3.9 Low	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N	HCL

Weaknesses

CWE-922 Insecure Storage of Sensitive Information

Affected Products

Product	Versions
HCL Sametime ChatHCL Software	11.5, 11.6, 11.6 IF1, 12.0, 12.0 FP1, 12.0.1, 12.0.1 FP1Affected

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109082

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.