CVE-2021-27769 HCL Sametime is vulnerable to an information disclosure
HCL Sametime leaks information that could assist attackers in further exploiting the system, requiring a patch to limit data exposure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-27769?
CVE-2021-27769 is a medium-severity vulnerability in HCL Software Sametime, published on 12 May 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Information leakage occurs when a website reveals information that could aid an attacker to further exploit the system. This information may or may not be sensitive and does not automatically mean a breach is likely to occur. Overall, any information that could be used for an attack should be limited whenever possible.
Weakness: CWE-472
Which versions are affected by CVE-2021-27769?
It affects 1 product.
Products include Hcltech Sametime.
How do I fix CVE-2021-27769?
No fix has been published for CVE-2021-27769 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-27769 being exploited?
There is no known exploitation of CVE-2021-27769 in the wild and no public exploit code.
Other vulnerabilities in HCL Software Sametime
- CVE-2021-27771 HCL Sametime is susceptible a file transfer service vulnerability
- CVE-2021-27772 HCL Sametime is vulnerable to an information disclosure
- CVE-2021-27770 HCL Sametime is vulnerable to arbitrary HTTP requests
- CVE-2022-42446 HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access
- CVE-2023-50349 HCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability
Sources
Also known as GHSA-8mq9-rqpm-7c34.