CVE-2019-7006: Avaya one-X Communicator Weak Encryption
First published: Tue Feb 26 2019(Updated: )
Avaya one-X Communicator uses weak cryptographic algorithms in the client authentication component that could allow a local attacker to decrypt sensitive information. Affected versions include all 6.2.x versions prior to 6.2 SP13.
Credit: securityalerts@avaya.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Avaya one-X Communicator | =6.2 | |
| Avaya one-X Communicator | =6.2-fp10 | |
| Avaya one-X Communicator | =6.2-fp3 | |
| Avaya one-X Communicator | =6.2-fp4 | |
| Avaya one-X Communicator | =6.2-fp6 | |
| Avaya one-X Communicator | =6.2-sp1 | |
| Avaya one-X Communicator | =6.2-sp12 | |
| Avaya one-X Communicator | =6.2-sp2 | |
| Avaya one-X Communicator | =6.2-sp5 | |
| Avaya one-X Communicator | =6.2-sp7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-7006?
CVE-2019-7006 is a vulnerability in Avaya one-X Communicator that uses weak cryptographic algorithms in the client authentication component, allowing a local attacker to decrypt sensitive information.
Which versions of Avaya one-X Communicator are affected by CVE-2019-7006?
The affected versions include all 6.2.x versions prior to 6.2 SP13.
What is the severity of CVE-2019-7006?
The severity of CVE-2019-7006 is medium with a severity score of 5.5.
How can a local attacker exploit CVE-2019-7006?
A local attacker can exploit CVE-2019-7006 by using weak cryptographic algorithms to decrypt sensitive information.
Are there any references related to CVE-2019-7006?
Yes, you can find more information on CVE-2019-7006 at the following references: [1](http://www.securityfocus.com/bid/107175), [2](https://downloads.avaya.com/css/P8/documents/101055601), [3](https://downloads.avaya.com/css/P8/documents/101055661)
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- vendor/avaya
- canonical/avaya one-x communicator
- version/avaya one-x communicator/6.2
- version/avaya one-x communicator/6.2-fp10
- version/avaya one-x communicator/6.2-fp3
- version/avaya one-x communicator/6.2-fp4
- version/avaya one-x communicator/6.2-fp6
- version/avaya one-x communicator/6.2-sp1
- version/avaya one-x communicator/6.2-sp12
- version/avaya one-x communicator/6.2-sp2
- version/avaya one-x communicator/6.2-sp5
- version/avaya one-x communicator/6.2-sp7