CVE-2011-3008

Currently unrated 🤨

Key Information

Vendor
Avaya
Status
Secure Access Link Gateway
Vendor
CVE Published:
5 August 2011

Summary

The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these domain names, as demonstrated by alarm and log information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/68922
vdb-entryx_refsource_XF
http://support.avaya.com/css/P8/documents/100140483
x_refsource_CONFIRM
http://www.securityfocus.com/bid/48942
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.