CVE-2008-3777

no score yetEPSS 0.3%

The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on the S8300C with SES enabled, writes account names and passwords to the (1) alarm and (2) system logs during failed login attempts, which allows local users to obtain login credentials by reading these logs.

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2008-08-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

avaya:communication_manager
avaya:sip_enablement_services

References

http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm
http://www.securityfocus.com/bid/30758
https://exchange.xforce.ibmcloud.com/vulnerabilities/44586
http://support.avaya.com/elmodocs2/security/ASA-2008-347.htm
http://www.securityfocus.com/bid/30758

Check your stack JSON