The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
avaya ip office phone manager |
||
avaya ip soft phone |
Vulmon