VULNERABILITY INTELLIGENCE
CVE-2023-45696
CVSS score4 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2024-02-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allows user entered data to be stored by the browser.
Weakness classification
- CWE-524: Use of Cache Containing Sensitive Information
Primary references
- psirt@hcl.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory