CVE-2020-7038CWE-284

Avaya Meetings Server Information Disclosure vulnerability

High · published April 28, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
70.3
In the wild
Unconfirmed
What it is

A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen sharing and whiteboard sessions. The affected versions of Management component of Avaya Equinox Conferencing include all 3.x versions before 3.17. Avaya Equinox Conferencing is now offered as Avaya Meetings Server.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01303 · 70.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-04-28T21:30Z
EPSS history
Timeline
  • 28 APR 21:30Z
    Avaya Meetings Server Information Disclosure vulnerability
    cvelistv5