Lucene search
HistoryDec 12, 2022 - 1:15 p.m.
CVE-2022-42446
cve-2022-42446
sametime 12
anonymous user
user directory
internal users
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
31.4%
Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.
Affected configurations
Node
hcltechsametimeMatch12.0-
ORhcltechsametimeMatch12.0fp1
Related
cve
cve
CVE-2022-42446
2022-12-12 13:15:14
prion
prion
Default credentials
2022-12-12 13:15:00
cvelist
cvelist
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
31.4%
Related for NVD:CVE-2022-42446