Description
Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy application can allow an attacker to perform malicious actions on the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Sametime | 11.5, 11.6, 11.6 IF1, 12.0, 12.0 FP1, 12.0.1, 12.0.1 FP1 | — |