CVE-2019-7006

Description

Avaya one-X Communicator uses weak cryptographic algorithms in the client authentication component that could allow a local attacker to decrypt sensitive information. Affected versions include all 6.2.x versions prior to 6.2 SP13.

Weakness classification

• CWE-327: Use of a Broken or Risky Cryptographic Algorithm

Primary references

• securityalerts@avaya.com — Third Party Advisory, VDB Entry
• securityalerts@avaya.com — Release Notes, Vendor Advisory
• securityalerts@avaya.com — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory