Описание
Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.
Ссылки
- MitigationVendor Advisory
- MitigationVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:hcltech:sametime:12.0:-:*:*:*:*:*:*
cpe:2.3:a:hcltech:sametime:12.0:fp1:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.00236
Низкий
6.5 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-276
CWE-276
Связанные уязвимости
CVSS3: 6.5
github
около 3 лет назад
Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.
EPSS
Процентиль: 46%
0.00236
Низкий
6.5 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-276
CWE-276