The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obtain login credentials by reading these logs.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2008-08-25T21:00:00
Updated: 2017-08-07T12:57:01
Reserved: 2008-08-25T00:00:00
Link: CVE-2008-3777
JSON object: View
NVD Information
Status : Modified
Published: 2008-08-25T21:41:00.000
Modified: 2017-08-08T01:32:09.827
Link: CVE-2008-3777
JSON object: View
Redhat Information
No data.
CWE