CVE-2007-1491: Medium severity Avaya SIP Enablement Services vulnerability
Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1491?
CVE-2007-1491 is considered a medium severity vulnerability due to its potential for exposing systems to external attacks.
How do I fix CVE-2007-1491?
To mitigate CVE-2007-1491, it is recommended to restrict access to port 8009 by implementing firewall rules or removing the service entirely if it is not needed.
What software is affected by CVE-2007-1491?
CVE-2007-1491 affects Avaya S87XX, S8500, S8300 systems running before CM version 3.1.3 and Avaya Aura SIP Enablement Services.
What type of attacks could be launched through CVE-2007-1491?
CVE-2007-1491 could allow unauthorized access or attacks such as data interception and service disruption due to external connections on port 8009.
Is there a workaround for CVE-2007-1491?
As a workaround for CVE-2007-1491, users can disable the AJP connector on Tomcat or ensure that the relevant ports are not exposed to untrusted networks.