Lucene search

[email protected]CVE-2007-1491

HistoryMar 16, 2007 - 10:19 p.m.

CVE-2007-1491

2007-03-1622:19:00

[email protected]

web.nvd.nist.gov

apache tomcat

avaya

s87xx

s8500

s8300

cm 3.1.3

cve-2007-1491

nvd

5.2 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.

Affected configurations

NVD

Node

avayasip_enablement_services

avayas8300Range≤cm_3.1.2

avayas8500Range≤cm_3.1.2

avayas8700Range≤cm_3.1.2

CPENameOperatorVersion
avaya:sip_enablement_servicesavaya sip enablement serviceseq*
avaya:s8300avaya s8300lecm_3.1.2
avaya:s8500avaya s8500lecm_3.1.2
avaya:s8700avaya s8700lecm_3.1.2

CPE	Name	Operator	Version
avaya:sip_enablement_services	avaya sip enablement services	eq	*
avaya:s8300	avaya s8300	le	cm_3.1.2
avaya:s8500	avaya s8500	le	cm_3.1.2
avaya:s8700	avaya s8700	le	cm_3.1.2

References

secunia.com/advisories/24434

support.avaya.com/elmodocs2/security/ASA-2007-051.htm

www.osvdb.org/33346

5.2 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

Related for CVE-2007-1491

cvelist1 nvd1 prion1