CVE-2008-3777

Currently unrated 🤨

Key Information

Vendor
Avaya
Status
Sip Enablement Services
Vendor
CVE Published:
25 August 2008

Summary

The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obtain login credentials by reading these logs.

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.