CVEvulnerability
CVE-2011-3008
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-08-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-16
Description
The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these domain names, as demonstrated by alarm and log information.
Affected configurations
• avaya secure access link gateway 1.5
• avaya secure access link gateway 1.8
• avaya secure access link gateway 2.0
Related
Weakness · not in database (1)
References
- http://support.avaya.com/css/P8/documents/100140483 Vendor Advisory
- http://www.kb.cert.org/vuls/id/690315 US Government Resource
- http://www.securityfocus.com/bid/48942 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68922 exchange.xforce.ibmcloud.com
- http://support.avaya.com/css/P8/documents/100140483 Vendor Advisory
- http://www.kb.cert.org/vuls/id/690315 US Government Resource
- http://www.securityfocus.com/bid/48942 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68922 exchange.xforce.ibmcloud.com