Lucene search
HistoryMay 03, 2002 - 4:00 a.m.
CVE-2001-1254
cve-2001-1254
com2001 alexis
internetpbx
password exposure
web access component
port 8888
cybersecurity.
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.6%
Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing.
Affected configurations
Node
com2001alexis_serverMatch2.0
ORcom2001alexis_serverMatch2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| com2001:alexis_server | com2001 alexis server | eq | 2.0 |
| com2001:alexis_server | com2001 alexis server | eq | 2.1 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.6%
Related for CVE-2001-1254