← CVE Intelligence

CVE-2023-45718

HCL Sametime is impacted by a failure to invalidate sessions PUBLISHED

Description (CNA)

Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session.  

Affected (CNA)

Vendor / productVersions
HCL Software / HCL Sametimeaffected 11.5, 11.6, 11.6 IF1, 12.0, 12.0 FP1, 12.0.1, 12.0.1 FP1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.