VULNERABILITY INTELLIGENCE

CVE-2018-15615

CVSS score7.2 HIGH

EPSS probability0.34%

CISA KEVNot currently listed

Published2018-09-24

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Description

A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

securityalerts@avaya.com — Third Party Advisory, VDB Entry
securityalerts@avaya.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory