« Volver al listado

CVE-2007-1491

Estado: ModificadaMedia (5.2)—

Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Avaya — S8300Avaya — S8500Avaya — S8700Avaya — SIP Enablement Services

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1491",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.2,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 5.1,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-03-16T22:19:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/24434",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-051.htm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/33346",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/24434",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-051.htm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/33346",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections from external interfaces via port 8009, which exposes it to attacks from outside parties."
    },
    {
      "lang": "es",
      "value": "Apache Tomcat en Avaya S87XX, S8500, y S8300 versiones anteriores a CM 3.1.3, y Avaya SES permite conexiones de interfaces externas mediante el puerto 8009, que lo expone a ataques de fuentes externas."
    }
  ],
  "lastModified": "2026-06-16T22:37:41.503",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:avaya:sip_enablement_services:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D0106ED-5E0F-4487-804C-BF3FF4CB985F"
            },
            {
              "criteria": "cpe:2.3:h:avaya:s8300:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B40402E-D157-4EBB-8412-03DBF1E0F504",
              "versionEndIncluding": "cm_3.1.2"
            },
            {
              "criteria": "cpe:2.3:h:avaya:s8500:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82A48EDE-B603-4404-8C85-9564B0F868F2",
              "versionEndIncluding": "cm_3.1.2"
            },
            {
              "criteria": "cpe:2.3:h:avaya:s8700:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A858B92B-4B2D-4100-8E9F-F397B5C69A32",
              "versionEndIncluding": "cm_3.1.2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}