Clear-text Storage of Sensitive Data in Avaya IP Office Phone Manager and IP Softphone

CVE-2005-0506 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as Avaya\IP400\Generic.

Learn more about our Cis Benchmark Audit For Microsoft Office.