665 matches found
HCL Sametime 安全漏洞
HCL Sametime is a conferencing solution from HCL Corporation, USA. A security vulnerability exists in HCL Sametime that stems from being affected by an error message containing sensitive information...
HCL Sametime 安全漏洞
HCL Sametime is a conferencing solution from HCL Corporation, USA. A security vulnerability exists in HCL Sametime v12.0.2 and prior versions, which stems from the use of an unused, legacy REST service enabled using the HTTP protocol, which could be used maliciously by an attacker with this servi...
PT-2024-23197 · Hcl · Hcl Sametime
Name of the Vulnerable Software and Affected Versions: HCL Sametime affected versions not specified Description: The issue is related to misconfigured security-related HTTP headers in HCL Sametime. Specifically, some HTTP headers are missing from web service responses, which can lead to less secu...
HCL Sametime 安全漏洞
HCL Sametime is a conferencing solution from HCL Corporation, USA. A security vulnerability exists in HCL Sametime v12.0.2 and earlier versions, which stems from being affected by misconfigured HTTP headers, causing the browser to be less secure when handling policies controlled by these headers ...
IBM Lotus Sametime Version Enumeration
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule Release .+?/i , 'api', 'meeting', /^meeting=.$/i , 'api', 'appshare', /^appshare=.$/i , 'api', 'docshare', /^docshare=.$/i , 'api',...
IBM Lotus Sametime WebPlayer Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IBM Lotus Sametime WebPlayer DoS', 'Description' = %q This module exploits a known flaw in the IBM Lotus Sametime WebPlayer version 8.5.2.1392 an...
IBM Lotus Notes Sametime User Enumeration
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'enumerable' class MetasploitModule 'IBM Lotus Notes Sametime User Enumeration', 'Description' = %q This module extracts usernames using the IBM Lotus Notes...
IBM Lotus Notes Sametime Room Name Bruteforce
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'enumerable' class MetasploitModule 'IBM Lotus Notes Sametime Room Name Bruteforce', 'Description' = %q This module bruteforces Sametime meeting room names via t...
The vulnerability of the software for HCL Sametime Chat and Meetings lies in the lack of protection for operational data, which allows attackers to disclose protected information.
The vulnerability of the HCL Sametime Chat and Meetings software lies in the lack of protection for mission-critical data. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...
CVE-2023-37540
Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data...
Design/Logic Flaw
Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data...
CVE-2023-37540
The CVE-2023-37540 entry concerns the Sametime Connect desktop chat client, which includes but does not use or require an Eclipse Secure Storage feature. The underlying issue is the use of an Eclipse feature to store sensitive data, which can lead to exposure of that data (information disclosure)...
CVE-2023-37540 HCL Sametime Chat is affected by an unimplemented feature in the UI
Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data...
CVE-2023-37540 HCL Sametime Chat is affected by an unimplemented feature in the UI
Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data...
PT-2024-12637
Name of the Vulnerable Software and Affected Versions Sametime Connect affected versions not specified Description The Sametime Connect desktop chat client includes an Eclipse feature called Secure Storage, although it does not use or require it. If this feature is used to store sensitive data, i...
HCL Sametime Security Vulnerability
HCL Technologies HCL Sametime is a conferencing solution from HCL Technologies, USA. A security vulnerability exists in HCL Sametime that stems from the use of Eclipse functionality to store sensitive data, resulting in an information disclosure vulnerability...
CVE-2023-45698
Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks...
CVE-2023-45698
Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks...
Code injection
Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks...
CVE-2023-45698 HCL Sametime is impacted by clickjacking
Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks...