Skip to content
OpenAdvisories
Low · 3.9 CVE-2023-37540 EUVD-2023-41427GHSA-qqr5-9j5g-m238

HCL Sametime Chat is affected by an unimplemented feature in the UI

Published Feb 23, 2024 · Updated Nov 29, 2024 · Assigned by HCL

Description

Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data.

Affected products

VendorProductAffectedFixed
HCL Software HCL Sametime Chat 11.5, 11.6, 11.6 IF1, 12.0, 12.0 FP1, 12.0.1, 12.0.1 FP1 —

References