Medium severity6.5NVD Advisory· Published Dec 12, 2022· Updated Jun 17, 2026

CVE-2022-42446

Description

Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users.

Affected products

HCLTech/Sametime2 versions
cpe:2.3:a:hcltech:sametime:12.0:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hcltech:sametime:12.0:-:*:*:*:*:*:*
- cpe:2.3:a:hcltech:sametime:12.0:fp1:*:*:*:*:*:*
HCL Software/Sametimellm-create
Range: >=12
HCL Software/Hcl Sametime Chatcpe-rescue
Range: 12.0, 12.0FP1

Patches

Vulnerability mechanics

References

support.hcltechsw.com/csmnvdMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000