CVE-2020-7038
Avaya Meetings Server Information Disclosure vulnerability
- State
- Published
- Severity
- 7.5 High
- Published
- Apr 28, 2021
- Updated
- Sep 16, 2024
- Reserved
- Jan 14, 2020
Description
A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen sharing and whiteboard sessions. The affected versions of Management component of Avaya Equinox Conferencing include all 3.x versions before 3.17. Avaya Equinox Conferencing is now offered as Avaya Meetings Server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | avaya |
Weaknesses
- CWE-284 Improper Access Control CWE-200: Information Exposure
Affected Products
| Product | Versions |
|---|---|
Avaya Meetings ManagementAvaya |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.