CVE-2023-37540

LowCVSS 3.9/10Last modified Jun 17, 2026

Description

Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage. Using this Eclipse feature to store sensitive data can lead to exposure of that data.

Metrics

CVSS 3.1 3.9/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-922

Affected software

No affected versions have been published.

Timeline

Published: Feb 23, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-375414.3HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.CVE-2023-375437.5Cacti before 1.2.6 allows IDOR (Insecure Direct Object Reference) for accessing any graph via a modified local_graph_id parameter to graph_x CVE-2023-375447.5Improper Authentication vulnerability in Apache Pulsar WebSocket Proxy allows an attacker to connect to the /pingpong endpoint without authe CVE-2023-375456.5In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication request CVE-2023-375466.5In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication request CVE-2023-375476.5In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication request CVE-2023-375486.5In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication request CVE-2023-375496.5In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication request CVE-2023-37556.1A vulnerability has been found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this vulnera CVE-2023-375506.5In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication request CVE-2023-375516.5In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication reques CVE-2023-375526.5In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication request