VULNERABILITY INTELLIGENCE
CVE-2023-37540
CVSS score3.9 LOW
EPSS probability0.18%
CISA KEVNot currently listed
Published2024-02-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Description
Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-922
Primary references
- psirt@hcl.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory