low3.9
CVE-2023-45718
Sametime is impacted by a failure to invalidate sessions.
Impact
Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Sametime | from 11.5 before 12.0.2 |