CVE-2011-3008 Information disclosure in n/a
Administrative access to Avaya SAL Gateway allows attackers to obtain sensitive alarm and log information via default server URL configurations.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2011-3008?
CVE-2011-3008 is a medium-severity vulnerability in n/a, published on 5 Aug 2011. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these domain names, as demonstrated by alarm and log information.
Weakness: CWE-16
Which versions are affected by CVE-2011-3008?
It affects 1 product.
Products include Avaya Secure Access Link Gateway.
How do I fix CVE-2011-3008?
No fix has been published for CVE-2011-3008 yet. Limit exposure of the affected software until one is available.
Is CVE-2011-3008 being exploited?
There is no known exploitation of CVE-2011-3008 in the wild and no public exploit code.
Sources
Also known as GHSA-272x-wj83-g7hx.