CVE-2021-27771highCWE-22CWE-434

CVE-2021-27771: high-severity vulnerability in HCL Software Sametime

HCL Sametime is susceptible a file transfer service vulnerability

Published · Updated

Follow this CVE+ Monitor Sametime

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.2epss 0.7%
In short

HCL Sametime has a vulnerability where attackers can modify a user's session ID cookie to upload unauthorized files or delete directories, disrupting the service. This happens because the application uses the same session ID for both chat and file transfer without proper validation.

Technical detail

The vulnerability allows attackers to manipulate the SID (Session ID) cookie used in file transfer operations, enabling arbitrary file upload (CWE-434) and directory deletion via path traversal (CWE-22). The attack requires interaction with the Sametime chat application and results in both integrity compromise and denial of service.

Summary generated and translated by AI from the official description.
User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service. When interacting in a normal matter with the Sametime chat application, users hold a cookie containing their session ID (SID). This value is also used when sending chat messages, receiving notifications and/or transferring files.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H
Affected products
HCL Software · Sametime
Related CVEs — HCL Software Sametime

In the same product, most dangerous first.

CVE-2021-27769MEDIUMHCL Sametime is vulnerable to an information disclosureEPSS 0.8%CVE-2021-27770MEDIUMHCL Sametime is vulnerable to arbitrary HTTP requestsEPSS 0.7%CVE-2021-27772HIGHHCL Sametime is vulnerable to an information disclosureEPSS 0.7%CVE-2021-27773MEDIUMHCL Sametime is vulnerable to clickjackingEPSS 0.5%CVE-2023-50355LOWHCL Sametime is impacted by generation of error messages containing sensitive informationEPSS 0.2%CVE-2024-30122MEDIUMHCL Sametime is impacted by misconfigured security related HTTP headersEPSS 0.2%