Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-42446 EUVD-2022-45519GHSA-r6p7-5w57-87q9

HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access

Published Nov 30, 2022 · Updated Apr 24, 2025 · Assigned by HCL

Description

Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.

Affected products

VendorProductAffectedFixed
HCL Software HCL Sametime 12.0, 12.0FP1 —

References