What is CVE-2020-7038?

CVE-2020-7038 is a high-severity vulnerability in Avaya Meetings Management, classified under Improper Access Control. CVSS score: 7.5/10. Published 2021-04-28.

How severe is CVE-2020-7038?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Avaya Meetings Management

CVE-2020-7038

A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen sharing and whiteboard sessions. The affected versions of Management component of Avaya Equinox Conferencing include all 3.x versions before 3.17. Avaya Equinox Conferencing is now offered as Avaya Meetings Server.

EPSS: 0.013 (67.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Avaya Meetings Management — versions 3.x
Avaya Equinox_conferencing

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

securityalerts@avaya.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-7038?: CVE-2020-7038 is a high-severity vulnerability in Avaya Meetings Management, classified under Improper Access Control. CVSS score: 7.5/10. Published 2021-04-28.
How severe is CVE-2020-7038?: High severity. CVSS v3 base score is 7.5 out of 10.