Lucene search
HistoryOct 03, 2022 - 4:13 p.m.
CVE-2008-6797
mitel
nupoint messenger
r11
r3
server
cleartext
sensitive information
network sniffing
vulnerability
cve-2008-6797
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.8%
The server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to Exchange servers, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
Node
mitelmitel_nupoint_messengerMatchr3
ORmitelmitel_nupoint_messengerMatchr11
Related
prion
prion
Design/Logic Flaw
2009-05-07 18:30:00
cvelist
cvelist
CVE-2008-6797
2022-10-03 16:13:48
nvd
nvd
CVE-2008-6797
2009-05-07 18:30:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.8%
Related for CVE-2008-6797