CVE-2018-15615 – CMS Supervisor Information Disclosure

https://notcve.org/view.php?id=CVE-2018-15615

A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x. Una vulnerabilidad en el componente Supervisor de Avaya Call Management System permite que un usuario local administrador extraiga información sensible de usuarios que se conectan a un host CMS remoto. Las versiones afectadas de CMS Supervisor incluyen la R17.0.x y la R18.0.x. • http://www.securityfocus.com/bid/105392 https://downloads.avaya.com/css/P8/documents/101052300 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •