CVE-2005-0506

State: Published
Severity: Not scored
Published: Feb 22, 2005
Updated: Aug 7, 2024
Reserved: Feb 22, 2005

Description

The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20050222 Avaya IP Office Phone Manager - Sensitive Information Cleartextmailing-list
20050222 Re: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerabilitymailing-list
http://support.avaya.com/elmodocs2/security/ASA-2005-041_Sensitive_Info_Leak.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.