NetSight
IP …
medium5.5Public exploit code

CVE-2020-7030

A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to gain una…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to gain unauthorized access to the component. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 though 11.0.4.3.

Affected products

VendorProductAffected versions
AvayaIp Office
from 10.0 through 10.1.0.7
from 11.0 through 11.0.4.2
Versions 9.0, 9.1

Weakness classification

CWE-522CWE-200

References