One-X Communicator version 6.2 SP14 - Problem.

[ardelapena]

One of my customers says that his security team found encryption vulnerabilities in version 6.2 SP14 of the One-X Communicator. This version is indicated to overcome the vulnerabilities of the previous versions (one-X Communicator Weak Encryption Vulnerability CVE-2019-7006). Anyone have knowledge on this subject? Do we have any solution to this potential vulnerability? Any advice?
Thanks in advance!

[mlombardi1]

What specific flaws did the security scan yield? A patch for SP14 was released in Nov 2019 that can be found here: https://support.avaya.com/downloads/...eleaseId=6.2.x

The release notes for SP14 have yet to be updated to reference the patch and what it addresses.