← Database

CVE-2008-3777

LOW CVSS: 2.1 Published: 2008-08-25 Modified: 2026-06-16

Description

The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obtain login credentials by reading these logs.

Affected Platforms

Avaya Sip Enablement ServicesAvaya S8300C ServerAvaya Communication Manager

Weakness Type

CWE-200

References