CVE-2018-15615 – CMS Supervisor Information Disclosure

https://notcve.org/view.php?id=CVE-2018-15615

24 Sep 2018 — A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x. Una vulnerabilidad en el componente Supervisor de Avaya Call Management System permite que un usuario local administrador extraiga información sensible de usuarios que se conectan a un host CMS remoto. Las versiones afectadas de CMS Supervisor incluyen la R17.0... • http://www.securityfocus.com/bid/105392 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •