Read the docs
TI-2020-05678 Aliases CVE-2020-7038GHSA-5p22-m2jf-cq84

Avaya Meetings Server Information Disclosure vulnerability

Priority LOW 35CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.

Summary

A vulnerability was discovered in Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to gain access to screen sharing and whiteboard sessions. The affected versions of Management component of Avaya Equinox Conferencing include all 3.x versions before 3.17. Avaya Equinox Conferencing is now offered as Avaya Meetings Server.

Why it matters now

EPSS 0.01303 70th percentileScored 2026-11-07
Fix Fixed Avaya Meetings Management (Avaya): 3.17

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
AvayaAvaya Meetings Management3.x to before 3.173.17Patch availableCNA
  • Avaya Meetings Management VendorAvaya Affected 3.x to before 3.17 Fixed in 3.17 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:avaya:equinox_conferencing:*:*:*:*:*:*:*:*9.0.0 to before 9.1.11VulnerableAvaya
  • cpe:2.3:a:avaya:equinox_conferencing:*:*:*:*:*:*:*:* Versions 9.0.0 to before 9.1.11 Vulnerable ·Avaya

Remediation

  • Fix · CNA Avaya Meetings Management (Avaya) Fixed in 3.17

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-7038
  2. 2026-10-03 Alias added: GHSA-5p22-m2jf-cq84

References

Advisory 1

  • TI-2020-05677 Avaya Equinox Conferencing XXE vulnerability CVSS 3.1HIGH 8.1
  • TI-2020-05673 Avaya Equinox Conferencing XSS CVSS 3.1MEDIUM 6.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences