Skip to content
OpenAdvisories
Medium · 5.9 CVE-2019-7005 EUVD-2019-16556GHSA-xwp8-2vq8-v6xg

Unauthenticated Information Disclosure Vulnerability in IP Office

Published Aug 7, 2020 · Updated Sep 16, 2024 · Assigned by avaya

Description

A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 through 11.0.4.2.

Affected products

VendorProductAffectedFixed
Avaya IP Office 10.0 – ≤ 10.1.0.7, 11.0 – ≤ 11.0.4.2 —

References