CVE-2018-15615CWE-200

CMS Supervisor Information Disclosure

High · published September 24, 2018

CVSS v3.0
7.2
EPSS
0%
Percentile
26.6
In the wild
Unconfirmed
What it is

A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2018-09-24T13:00Z
EPSS history
Timeline
  • 24 SEP 13:00Z
    CMS Supervisor Information Disclosure
    cvelistv5