CVE-2020-7030

A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to gain unauthorized access to the component. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 though 11.0.4.3.

Link	Resource
https://downloads.avaya.com/css/P8/documents/101067493	Vendor Advisory
http://packetstormsecurity.com/files/157957/Avaya-IP-Office-11-Insecure-Transit-Password-Disclosure.html
http://seclists.org/fulldisclosure/2020/Jun/12

Configuration 1

cpe:2.3:a:avaya:ip_office:9.1:sp1:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:sp3:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:sp4:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:sp5:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:sp6:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:sp7:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:sp8:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:sp9:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:sp10:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:sp11:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:sp12:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.1:-:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:*:*:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:*:*:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:-:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp1:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp2:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp3:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp4:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp5:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp6:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp7:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp8:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp9:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp10:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp11:*:*:*:*:*:* cpe:2.3:a:avaya:ip_office:9.0:sp12:*:*:*:*:*:*

---

Published : 2020-06-04 12:15

Updated : 2020-06-09 07:15

---

NVD link : CVE-2020-7030

Mitre link : CVE-2020-7030

No products.

CWE-200