Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-27772

Опубликовано: 12 мая 2022
Источник: nvd
CVSS3: 7.1
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

Users are able to read group conversations without actively taking part in them. Next to one to one conversations, users are able to start group conversations with multiple users. It was found possible to obtain the contents of these group conversations without being part of it. This could lead to information leakage where confidential information discussed in private groups is read by other users without the users knowledge.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:hcltech:sametime:11.6:*:*:*:*:*:*:*

EPSS

Процентиль: 40%
0.0018
Низкий

7.1 High

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-285
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 6.5
github
больше 3 лет назад

Users are able to read group conversations without actively taking part in them. Next to one to one conversations, users are able to start group conversations with multiple users. It was found possible to obtain the contents of these group conversations without being part of it. This could lead to information leakage where confidential information discussed in private groups is read by other users without the users knowledge.

EPSS

Процентиль: 40%
0.0018
Низкий

7.1 High

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-285
NVD-CWE-noinfo