Vulnerability · Published May 12, 2022 · Assigned by HCL
CVE-2021-27769HCL Sametime is vulnerable to an information disclosure
Medium 5.3
In plain English
A medium-severity security flaw in Sametime from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.8%top 44.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Information leakage occurs when a website reveals information that could aid an attacker to further exploit the system. This information may or may not be sensitive and does not automatically mean a breach is likely to occur. Overall, any information that could be used for an attack should be limited whenever possible.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | Sametime | 11.6 |
Weakness: CWE-472 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N