5

CVE-2011-3008

EPSS 0.58%
Veröffentlicht 05.08.2011 21:55:09
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these domain names, as demonstrated by alarm and log information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Avaya ≫ Secure Access Link Gateway Version1.5

Avaya ≫ Secure Access Link Gateway Version1.8

Avaya ≫ Secure Access Link Gateway Version2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.58%	0.664

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://support.avaya.com/css/P8/documents/100140483

Vendor Advisory

http://www.kb.cert.org/vuls/id/690315

US Government Resource

http://www.securityfocus.com/bid/48942

https://exchange.xforce.ibmcloud.com/vulnerabilities/68922

https://nvd.nist.gov/vuln/detail/CVE-2011-3008

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-3008

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-3008

EUVD