Sensitive Information Disclosure in HCL Sametime for Android
CVE-2026-21791

3.3LOW

Key Information:

Vendor

HCL Software
Status
Sametime
Vendor
CVE Published:
10 March 2026

What is CVE-2026-21791?

HCL Sametime for Android is affected by a vulnerability that results in the disclosure of sensitive information. This occurs when hostnames are written to application logs and certain URLs, potentially exposing critical data to unauthorized access. This vulnerability emphasizes the importance of secure logging practices to prevent unintended data exposure.

Affected Version(s)

Sametime Android 12.0.21

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.