6.5

CVE-2019-7006

Avaya one-X Communicator uses weak cryptographic algorithms in the client authentication component that could allow a local attacker to decrypt sensitive information. Affected versions include all 6.2.x versions prior to 6.2 SP13.

Data is provided by the National Vulnerability Database (NVD)
Avaya ≫ One-x Communicator Version6.2 Update-
Avaya ≫ One-x Communicator Version6.2 Updatefp10
Avaya ≫ One-x Communicator Version6.2 Updatefp3
Avaya ≫ One-x Communicator Version6.2 Updatefp4
Avaya ≫ One-x Communicator Version6.2 Updatefp6
Avaya ≫ One-x Communicator Version6.2 Updatesp1
Avaya ≫ One-x Communicator Version6.2 Updatesp12
Avaya ≫ One-x Communicator Version6.2 Updatesp2
Avaya ≫ One-x Communicator Version6.2 Updatesp5
Avaya ≫ One-x Communicator Version6.2 Updatesp7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.19
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
securityalerts@avaya.com 6.5 1 5.5
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

http://www.securityfocus.com/bid/107175
Third Party Advisory
VDB Entry