CVE-2022-42446 — HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access

CVE-2022-42446

HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access PUBLISHED

Description (CNA)

Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.

Affected (CNA)

Vendor / product	Versions
HCL Software / HCL Sametime	affected 12.0, 12.0FP1

CWE

No CWE identifiers supplied.

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101768

ADP enrichment

CVE

No English description supplied.

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101768

CISA-ADP

No English description supplied.

No references supplied.