CVE-2018-15615

A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x.

Score

CVSS 3.0 7.2 High

Status

Modified - securityalerts@avaya.com

Published

2018-09-24

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Call Management System Supervisor (Avaya)

References

• http://www.securityfocus.com/bid/105392
• https://downloads.avaya.com/css/P8/documents/101052300