2.1
CVSSv2

CVE-2020-7030

Published: 04/06/2020 Updated: 09/06/2020
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

A sensitive information disclosure vulnerability exists in the web interface component of IP Office that may potentially allow a local user to gain unauthorized access to the component. Affected versions of IP Office include: 9.x, 10.0 up to and including 10.1.0.7 and 11.0 though 11.0.4.3.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

avaya ip office 9.0

avaya ip office 9.1

avaya ip office

Exploits

Avaya IP Office versions 9180 through 11 suffer from an insecure transit vulnerability that allows for password disclosure ...