Vulnerabilities > CVE-2021-27770 - Unspecified vulnerability in Hcltech Sametime 11.6
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |