CVE-2021-27771 HCL Sametime is susceptible a file transfer service vulnerability
Attackers can modify session IDs to upload arbitrary files or delete directories, leading to code execution or denial of service in HCL Sametime.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-27771?
CVE-2021-27771 is a high-severity vulnerability in HCL Software Sametime, published on 12 May 2022. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service. When interacting in a normal matter with the Sametime chat application, users hold a cookie containing their session ID (SID). This value is also used when sending chat messages, receiving notifications and/or transferring files.
Which versions are affected by CVE-2021-27771?
It affects 1 product.
Products include Hcltech Sametime.
How do I fix CVE-2021-27771?
No fix has been published for CVE-2021-27771 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-27771 being exploited?
There is no known exploitation of CVE-2021-27771 in the wild and no public exploit code.
Other vulnerabilities in HCL Software Sametime
- CVE-2021-27772 HCL Sametime is vulnerable to an information disclosure
- CVE-2021-27770 HCL Sametime is vulnerable to arbitrary HTTP requests
- CVE-2022-42446 HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access
- CVE-2023-50349 HCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-30122 HCL Sametime is impacted by misconfigured security related HTTP headers
Sources
Also known as GHSA-3jcp-j236-2qqc.