CVE-2018-15615

CMS Supervisor Information Disclosure

State: Published
Severity: 7.2 High
Published: Sep 24, 2018
Updated: Aug 5, 2024
Reserved: Aug 21, 2018

Description

A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x.

Scores

CVSS	Score	Vector	Source
3.0	7.2 High	CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H	avaya

Weaknesses

CWE-200 Information Exposure

Affected Products

Product	Versions
Call Management System SupervisorAvaya	Affected verisons include R17.0.x and R18.0.xAffected

References

https://downloads.avaya.com/css/P8/documents/101052300
105392vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.