Lucene search

AvayaCVELIST:CVE-2020-7038

HistoryApr 28, 2021 - 9:30 p.m.

CVE-2020-7038 Avaya Meetings Server Information Disclosure vulnerability

2021-04-2821:30:21

CWE-284

avaya

www.cve.org

cve-2020-7038

information disclosure

avaya

equinox conferencing

screen sharing

whiteboard sessions

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

69.1%

JSON

A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen sharing and whiteboard sessions. The affected versions of Management component of Avaya Equinox Conferencing include all 3.x versions before 3.17. Avaya Equinox Conferencing is now offered as Avaya Meetings Server.

CNA Affected

[
  {
    "product": "Avaya Meetings Management",
    "vendor": "Avaya",
    "versions": [
      {
        "lessThan": "3.17",
        "status": "affected",
        "version": "3.x",
        "versionType": "custom"
      }
    ]
  }
]

References

support.avaya.com/css/P8/documents/101075574

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

69.1%

JSON

Related for CVELIST:CVE-2020-7038