csirt@kutim:~/threat-intel/cve/CVE-2020-7030

Katalog CVE

CVSS 5.5 · Medium EPSS 1,0%

Kerentanan Insufficiently Protected Credentials pada avaya ip office. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to gain unauthorized access to the component. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 though 11.0.4.3.

Rincian

Terbit di NVD
4 Juni 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-522: Insufficiently Protected Credentials
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
EPSS (30 hari)
1,0% peluang dieksploitasi; lebih tinggi dari 63,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
avaya ip office Versi 10.0 hingga 10.1.0.7
avaya ip office Versi 11.0 hingga 11.0.4.2
avaya ip office Versi 9.0
avaya ip office Versi 9.0 sp1
avaya ip office Versi 9.0 sp10
avaya ip office Versi 9.0 sp11
avaya ip office Versi 9.0 sp12
avaya ip office Versi 9.0 sp2
avaya ip office Versi 9.0 sp3
avaya ip office Versi 9.0 sp4
avaya ip office Versi 9.0 sp5
avaya ip office Versi 9.0 sp6
avaya ip office Versi 9.0 sp7
avaya ip office Versi 9.0 sp8
avaya ip office Versi 9.0 sp9
avaya ip office Versi 9.1
avaya ip office Versi 9.1 sp1
avaya ip office Versi 9.1 sp10
avaya ip office Versi 9.1 sp11
avaya ip office Versi 9.1 sp12
avaya ip office Versi 9.1 sp3
avaya ip office Versi 9.1 sp4
avaya ip office Versi 9.1 sp5
avaya ip office Versi 9.1 sp6
avaya ip office Versi 9.1 sp7
avaya ip office Versi 9.1 sp8
avaya ip office Versi 9.1 sp9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.