CVE-2023-37540
HCL Sametime Chat is affected by an unimplemented feature in the UI
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 3.9EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Feb 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Affected products
HCL Software · HCL Sametime ChatWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →