// For flags

CVE-2020-7030

IPO Information Disclosure

Severity Score

5.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A sensitive information disclosure vulnerability was discovered in the web interface component of IP Office that may potentially allow a local user to gain unauthorized access to the component. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 though 11.0.4.3.

Se detectó una vulnerabilidad de divulgación de información confidencial en el componente web interface de IP Office, que puede permitir potencialmente a un usuario local conseguir acceso no autorizado al componente. Las versiones afectadas de IP Office incluyen: 9.x, 10.0 hasta 10.1.0.7 y 11.0 hasta 11.0.4.3

Avaya IP Office versions 9.1.8.0 through 11 suffer from an insecure transit vulnerability that allows for password disclosure.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-01-14 CVE Reserved
  • 2020-06-03 CVE Published
  • 2020-06-12 First Exploit
  • 2023-03-08 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-522: Insufficiently Protected Credentials
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
>= 10.0 <= 10.1.0.7
Search vendor "Avaya" for product "Ip Office" and version " >= 10.0 <= 10.1.0.7"
-
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
>= 11.0 <= 11.0.4.2
Search vendor "Avaya" for product "Ip Office" and version " >= 11.0 <= 11.0.4.2"
-
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
-
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp1
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp10
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp11
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp12
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp2
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp3
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp4
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp5
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp6
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp7
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp8
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.0
Search vendor "Avaya" for product "Ip Office" and version "9.0"
sp9
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
-
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp1
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp10
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp11
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp12
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp3
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp4
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp5
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp6
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp7
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp8
Affected
Avaya
Search vendor "Avaya"
Ip Office
Search vendor "Avaya" for product "Ip Office"
9.1
Search vendor "Avaya" for product "Ip Office" and version "9.1"
sp9
Affected