CVE-2020-7030

Name of the Vulnerable Software and Affected Versions Avaya IP Office versions 9.x through 11.0.4.3

Description A sensitive information disclosure vulnerability was discovered in the web interface component of Avaya IP Office, potentially allowing a local user to gain unauthorized access to the component. This issue may lead to password disclosure.

Recommendations For versions 9.x through 11.0.4.3, consider restricting access to the web interface component until a patch is available. As a temporary workaround, disabling the web interface component may help minimize the risk of exploitation.